Access Restriction Bypass
Affecting libx11 package, versions <2:1.6.3-1ubuntu2.1
Report new vulnerabilities
Do your applications use this vulnerable package?
Test your applications
Overview
The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.
References
CVSS Score
9.8
low severity
-
Attack VectorNetwork
-
Attack ComplexityLow
-
Privileges RequiredNone
-
User InteractionNone
-
ScopeUnchanged
-
ConfidentialityHigh
-
IntegrityHigh
-
AvailabilityHigh
- CVE
- CVE-2016-7942
- CWE
- CWE-264 CWE-787
- Snyk ID
- SNYK-UBUNTU1604-LIBX11-339134
- Disclosed
- 13 Dec, 2016
- Published
- 13 Dec, 2016