CVE-2016-5407 The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specificat...
CriticalCVSS 9.8
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/libxv(Ubuntu:22.04) | < 2:1.0.11-1 | 2:1.0.11-1 |
| debian/libxv(Debian:12) | < 2:1.0.11-1 | 2:1.0.11-1 |
| debian/libxv(Debian:13) | < 2:1.0.11-1 | 2:1.0.11-1 |
| debian/libxv(Debian:14) | < 2:1.0.11-1 | 2:1.0.11-1 |
| x.org libxv | <= 1.0.10 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| fedoraproject fedora | = 25 | No fix listed |
| alpine/libxv(Alpine:v3.2) | < 1.0.10-r1 | 1.0.10-r1 |
| alpine/libxv(Alpine:v3.3) | < 1.0.10-r2 | 1.0.10-r2 |
References
- Ubuntu CVE tracker vendor-advisory
- USN-5449-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2016-5407 vendor-advisory
- [oss-security] 20161004 X.Org security advisory: Protocol handling issues in X Window System client libraries mailing-list third-party-advisory
- [oss-security] 20161004 Re: X.Org security advisory: Protocol handling issues in X Window System client libraries mailing-list third-party-advisory
- 93368 third-party-advisory vdb-entry
- 1036945 third-party-advisory vdb-entry
- cgit.freedesktop.org issue-tracking patch
- FEDORA-2016-f71cc44cf8 vendor-advisory
- FEDORA-2016-5aa206bd16 vendor-advisory
- [xorg-announce] 20161004 X.Org security advisory: Protocol handling issues in X Window System client libraries mailing-list vendor-advisory
- GLSA-201704-03 vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking