Out-of-bounds Read

Affecting libxi package, versions *

Overview

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.

References

• CVE Details
• Debian Security Tracker
• Fedora Security Update
• Fedora Security Update
• Gentoo Security Advisory
• OSS security Advisory
• OSS security Advisory
• Security Focus
• Security Tracker
• Ubuntu CVE Tracker
• https://cgit.freedesktop.org/xorg/lib/libXi/commit/?id=19a9cd607de73947fcfb104682f203ffe4e1f4e5
• https://lists.x.org/archives/xorg-announce/2016-October/002720.html