VDB

GCVE-VVD-MAGEIA-2021-219

GCVE-VVD-MAGEIA-2021-219
Advisory Published
Vulnetix · Advisory published November 20, 2021
XLookupColor() and other X libraries function lack proper validation of the length of their string parameters. If those parameters can be controlled by an external application (for instance a color name that can be emitted via a terminal control sequence) it can lead to the emission of extra X protocol requests to the X server (CVE-2021-31535).

Affected Products

VendorProductVersionsPlatforms
Mageiaclamav0 (affected), 0.103.4-1.mga8 (unaffected)
Mageialibx110 (affected), 1.6.12-1.1.mga7 (unaffected), 0 (affected), 1.6.12-1.1.mga7 (unaffected)
Mageialibx110 (affected), 1.7.0-1.1.mga8 (unaffected), 0 (affected), 1.7.0-1.1.mga8 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›