CVE-2016-7944
libxfixes3: Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges...
CVE-2016-7944 is fixed in libxfixes3 on 1 platform, first by libxfixes3 1:5.0.3-1, released December 13, 2016. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0340
88th percentile
Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxfixes3 · Ubuntu 18.04.6 LTS (bionic) | 1:5.0.3-1 | libxfixes3 1:5.0.3-1 | Dec 13, 2016 |
| libxfixes3 · Ubuntu 20.04 LTS (focal) | 1:5.0.3-1 | libxfixes3 1:5.0.3-1 | Dec 13, 2016 |