CVE-2018-14599
libx11-6: An issue was discovered in libX11 through 1.6.5
CVE-2018-14599 is fixed in 3 products on 1 platform, first by libx11-6 2:1.6.4-3ubuntu0.1, released August 23, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0421
91st percentile
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libx11-6 · Ubuntu 18.04.6 LTS (bionic) | 2:1.6.4-3ubuntu0.1 | libx11-6 2:1.6.4-3ubuntu0.1 | Aug 23, 2018 |
| libx11-data · Ubuntu 18.04.6 LTS (bionic) | 2:1.6.4-3ubuntu0.1 | libx11-data 2:1.6.4-3ubuntu0.1 | Aug 23, 2018 |
| libx11-xcb1 · Ubuntu 18.04.6 LTS (bionic) | 2:1.6.4-3ubuntu0.1 | libx11-xcb1 2:1.6.4-3ubuntu0.1 | Aug 23, 2018 |