Ubuntu: USN-6407-1 Moderate Vulnerability in libx11 Denial Of Service

ubuntu

October 3, 2023

Several security issues were fixed in libx11.

Summary

Several security issues were fixed in libx11.

Software Description:

- libx11: X11 client-side library

Details:

Gregory James Duck discovered that libx11 incorrectly handled certain

keyboard symbols. If a user were tricked into connecting to a malicious X

server, a remote attacker could use this issue to cause libx11 to crash,

resulting in a denial of service, or possibly execute arbitrary code.

(CVE-2023-43785)

Yair Mizrahi discovered that libx11 incorrectly handled certain malformed

XPM image files. If a user were tricked into opening a specially crafted

XPM image file, a remote attacker could possibly use this issue to consume

memory, leading to a denial of service. (CVE-2023-43786)

Yair Mizrahi discovered that libx11 incorrectly handled certain malformed

XPM image files. If a user were tricked into opening a specially crafted

XPM image file, a remote attacker could use this issue to cause libx11 to

crash, leading to a denial of service, or possibly exe...

Read the Full Advisory

Topics Covered

security advisory denial of service software update Ubuntu libx11

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   libx11-6                        2:1.8.4-2ubuntu0.3

Ubuntu 22.04 LTS:
   libx11-6                        2:1.7.5-1ubuntu0.3

Ubuntu 20.04 LTS:
   libx11-6                        2:1.6.9-2ubuntu1.6

After a standard system update you need to reboot your computer to make all
the necessary changes.