CVE-2018-14600

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
VendorProductVersion
x.orglibx11
𝑥
≤ 1.6.5
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libx11
bullseye (security)
2:1.7.2-1+deb11u2
fixed
bullseye
2:1.7.2-1+deb11u2
fixed
wheezy
no-dsa
bookworm
2:1.8.4-2+deb12u2
fixed
bookworm (security)
2:1.8.4-2+deb12u2
fixed
trixie
2:1.8.7-1
fixed
sid
2:1.8.10-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libx11
bionic
Fixed 2:1.6.4-3ubuntu0.1
released
xenial
Fixed 2:1.6.3-1ubuntu2.1
released
trusty
Fixed 2:1.6.2-1ubuntu2.1
released