Do your applications use this vulnerable package?
Test your applications
Overview
X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.
References
- CVE Details
- Debian Security Tracker
- Fedora Security Update
- Fedora Security Update
- OSS security Advisory
- OSS security Advisory
- Security Focus
- Security Tracker
- Ubuntu CVE Tracker
- https://cgit.freedesktop.org/xorg/lib/libXtst/commit/?id=9556ad67af3129ec4a7a4f4b54a0d59701beeae3
- https://lists.x.org/archives/xorg-announce/2016-October/002720.html
CVSS Score
7.5
low severity
-
Attack VectorNetwork
-
Attack ComplexityLow
-
Privileges RequiredNone
-
User InteractionNone
-
ScopeUnchanged
-
ConfidentialityNone
-
IntegrityNone
-
AvailabilityHigh
- CVE
- CVE-2016-7952
- CWE
- CWE-20 CWE-284
- Snyk ID
- SNYK-UBUNTU1604-LIBXTST-310025
- Disclosed
- 13 Dec, 2016
- Published
- 13 Dec, 2016