CVE-2016-7943
Fixed in a distro release EPSS 4%
The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations.
Products: fedoraproject fedora, x.org libx11
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.2 | libx11 | 1.6.3-r1 |
| Alpine 3.3 | libx11 | 1.6.3-r3 |
| Debian 12 | libx11 | 2:1.6.4-1 |
| Debian 13 | libx11 | 2:1.6.4-1 |
| Debian 14 | libx11 | 2:1.6.4-1 |
| Debian 7 | libx11 | 2:1.5.0-1+deb7u3 |
| Ubuntu 14.04 LTS | libx11 | 2:1.6.2-1ubuntu2.1 |
| Ubuntu 16.04 LTS | libx11 | 2:1.6.3-1ubuntu2.1 |
| Ubuntu 18.04 LTS | libx11 | 2:1.6.4-3ubuntu0.1 |