debian/libxfixes vulnerabilities

Latest debian/libxfixes CVEs

Newest publication first

1. CVE-2016-7944 Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and g...

   Published 2016-12-13

   Critical·CVSS 9.8 EPSS 3.4%

   Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.

2. DLA-654-1 libxfixes - security update

   Published 2016-10-14

   Unknown

3. CVE-2013-1983 Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.

   Published 2013-06-15

   Medium·CVSS 6.8 EPSS 2.1%

   Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.

4. DSA-2676-1 libxfixes - several

   Published 2013-05-23

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.