ALPINE-CVE-2023-43786 PUBLISHED CVSS 5.5 MEDIUM

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.17libx111.2-r0, 1.2.1-r0, 1.2.2-r0
Alpine:v3.23libx111.8.4-r4, 1.8.4-r3, 1.8.4-r2
Alpine:v3.22libx111.8.4-r1, 1.6.8-r1, 1.6.8-r0
Alpine:v3.20libx111.6.11-r0, 1.6.12-r0, 1.6.2-r0
Alpine:v3.18libx111.3.6-r0, 0, 1.1.99.2-r0
Alpine:v3.21libx111.6.9-r0, 1.7.0-r0, 1.7.1-r0
Alpine:v3.19libx111.8.6-r0, 1.8.5-r2, 1.8.5-r1
Alpine:v3.16libx110, 1.8-r1, 1.8-r0

Timeline

References

Open in Interactive Console →