An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libx11 | X.org | * | 1.6.5 (including) |
| Red Hat Enterprise Linux 7 | RedHat | gdm-1:3.28.2-16.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | libX11-0:1.6.7-2.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | libxkbcommon-0:0.7.1-3.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | mesa-libGLw-0:8.0.0-5.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | xorg-x11-drv-ati-0:19.0.1-2.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | xorg-x11-drv-vesa-0:2.4.0-3.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | xorg-x11-drv-wacom-0:0.36.1-3.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | xorg-x11-server-0:1.20.4-7.el7 | * |
| Libx11 | Ubuntu | bionic | * |
| Libx11 | Ubuntu | devel | * |
| Libx11 | Ubuntu | trusty | * |
| Libx11 | Ubuntu | upstream | * |
| Libx11 | Ubuntu | xenial | * |