Out-of-bounds read in libx11 - CVE-2023-43785

Vulnerability identifier: #VU81432

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-43785

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the _XkbReadKeySyms() function. A local user can trigger an out-of-bounds read error and read contents of memory on the system.

libx11
Cloud Pak for Network Automation
Platform Automation Toolkit
Enterprise SONiC
IBM Cloud Pak for Watson AIOps
Amazon Linux AMI
Gentoo Linux
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
OpenBSD
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Slackware Linux
Ubuntu
Basesystem Module
openSUSE Leap
openEuler
Fedora
Data Lakehouse
Migration Toolkit for Runtimes
Isolation Segment
VMware Tanzu Application Service for VMs
Red Hat OpenShift Dev Spaces
App Connect Enterprise Certified Container
Red Hat Migration Toolkit for Applications
RecoverPoint for Virtual Machines
libx11-6 (Ubuntu package)
libX11
libX11-6-32bit
libX11-xcb1-debuginfo-32bit
libX11-xcb1-32bit
libX11-6-debuginfo-32bit
libX11-data
libX11-xcb1
libX11-6
libX11-xcb1-debuginfo
libX11-6-debuginfo
libX11-devel
libX11-debugsource
libX11-xcb1-32bit-debuginfo
libX11-devel-32bit
libX11-6-32bit-debuginfo
libX11 (Red Hat package)
libX11-help
libX11-debuginfo
libX11-common
libX11-xcb
libx11 (Debian package)
x11-libs/libX11
libX11-doc
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform
VMware Tanzu Operations Manager
RecoverPoint for VMs
Red Hat Single Sign-On
Dell EMC VxRail Appliance

Install updates from vendor's website.

libx11 - update to 1.8.7
Data Lakehouse - update to 1.1.0.0
Cloud Pak for Network Automation - update to 2.7.4
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
libx11-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 2:1.6.9-2ubuntu1.6, 2:1.7.5-1ubuntu0.3, 2:1.8.4-2ubuntu0.3
Migration Toolkit for Runtimes - update to 1.2.6
OpenShift API for Data Protection (OADP) - update to 1.3.2
libX11 - addressed in versions 1.6.0-2.2.16, 1.7.2-3
libX11-6-32bit - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-xcb1-debuginfo-32bit - update to 1.6.2-12.33.1
libX11-xcb1-32bit - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-6-debuginfo-32bit - update to 1.6.2-12.33.1
libX11-data - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-xcb1 - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-6 - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-xcb1-debuginfo - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-6-debuginfo - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-devel - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-debugsource - addressed in versions 1.6.2-12.33.1, 1.6.5-150000.3.33.1
libX11-xcb1-32bit-debuginfo - update to 1.6.5-150000.3.33.1
libX11-devel-32bit - update to 1.6.5-150000.3.33.1
libX11-6-32bit-debuginfo - update to 1.6.5-150000.3.33.1
libX11 (Red Hat package) - addressed in versions 1.6.8-8.el8, 1.7.0-9.el9
libX11-help - update to 1.6.9-8
libX11 - update to 1.6.9-8
libX11-debuginfo - update to 1.6.9-8
libX11-devel - update to 1.6.9-8
libX11-debugsource - update to 1.6.9-8
libX11-common - addressed in versions 1.7.0-9, 1.8.7-1
libX11-xcb - addressed in versions 1.7.0-9, 1.8.7-1
libX11-devel - addressed in versions 1.7.0-9, 1.8.7-1
libX11 - addressed in versions 1.7.0-9, 1.8.7-1
libx11 (Debian package) - addressed in versions 2:1.7.2-1+deb11u2, 2:1.8.4-2+deb12u2
Migration Toolkit for Containers - update to 1.8.4
x11-libs/libX11 - update to 1.8.7
libX11 - update to 1.8.7
libX11-doc - update to 1.8.7-1
libX11 - update to 1.8.7-1.fc39
IBM Cloud Pak for Multicloud Management - update to 2.3 FP11
VMware Tanzu Operations Manager - addressed in versions 2.7.25, 2.8.16, 2.9.12, 2.10.3
Isolation Segment - addressed in versions 2.11.41, 2.13.26, 3.0.18, 3.0.19, 4.0.10, 4.0.11
VMware Tanzu Application Service for VMs - addressed in versions 2.11.47, 2.13.29, 3.0.18, 3.0.19, 4.0.10, 4.0.11
Red Hat OpenShift Dev Spaces - update to 3.16.0
Platform Automation Toolkit - addressed in versions 4.0.13, 4.1.13, 4.2.8, 4.3.5
Enterprise SONiC - update to 4.2.1
IBM Cloud Pak for Watson AIOps - update to 4.6.0
Red Hat OpenShift Container Platform - addressed in versions 4.13.45, 4.14.32, 4.14.33, 4.16.15, 4.17.0
App Connect Enterprise Certified Container - addressed in versions 5.0.14, 11.2.0
RecoverPoint for VMs - update to 6.0.SP1.P1
Red Hat Migration Toolkit for Applications - addressed in versions 6.2.3, 7.0.3
Red Hat Single Sign-On - update to 7.6.9
Dell EMC VxRail Appliance - update to 8.0.120

• https://seclists.org/oss-sec/2023/q4/17
• https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/6858d468d9ca55fb4c5fd70b223dbc78a3358a7f

• Multiple vulnerabilities in libx11
• Ubuntu update for libx11
• Slackware Linux update for libX11
• Fedora 39 update for libX11
• SUSE update for libX11
• OpenBSD update for libX11 and libXpm
• SUSE update for libX11
• Debian update for libx11
• Ubuntu update for libx11
• VMware Tanzu products update for libx11
• Amazon Linux AMI update for libX11
• VMware Tanzu products update for libx11
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• openEuler update for libX11
• Red Hat Enterprise Linux 9 update for libX11
• Red Hat Enterprise Linux 8 update for libX11
• Multiple vulnerabilities in Dell Enterprise SONiC Distribution
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 6.2
• Gentoo update for X.Org X11 library
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Amazon Linux AMI update for libX11
• Anolis OS update for libX11
• Anolis OS update for libX11
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 7.0