6.5Medium

CVE-2023-43785Libx11: out-of-bounds memory access in _xkbreadkeysyms()

libX11; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 6 Published: (3 years ago)

Description

A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.

Weakness (CWE): CWE-787CWE-125

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
enterprise linux 8 —
enterprise linux 9 —
fedoraproject fedora 38
redhat enterprise linux 8.0
Red Hat Red Hat Enterprise Linux 6 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 9 all versions
— libX11 < 1.8.7
x.org libx11 < 1.8.7

References and patches

CPE matches (NVD) (4)

  • cpe:2.3:a:x.org:libx11:*:*:*:*:*:*:*:* < 1.8.7
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*