SUSE-SU-2018:2934-1 -- SLES xorg-x11-libX11ID: oval:org.secpod.oval:def:89002395 | Date: (C)2021-02-26 (M)2023-03-08 |
Class: PATCH | Family: unix |
This update for xorg-x11-libX11 fixes the following issues: - CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact - CVE-2018-14600: The function XListExtensions interpreted a variable as signed instead of unsigned, resulting in an out-of-bounds write , leading to DoS or remote code execution - CVE-2018-14598: A malicious server could have sent a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS
Platform: |
SUSE Linux Enterprise Server 11 SP4 |