CVE-2016-7952: Input Validation
Last updated 20 October 2026
Other sources
X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libxtstto a version that resolves this vulnerability.Fixed in 2:1.2.3-1.1Fixed in 2:1.2.5-1 - Upgrade
Upgrade
X.org libXtstto a version that resolves this vulnerability.Fixed in 1.2.3
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7952?
CVE-2016-7952 has a moderate severity level as it can lead to a denial of service due to an infinite loop.
How do I fix CVE-2016-7952?
To fix CVE-2016-7952, upgrade the X.org libXtst package to version 1.2.3 or later.
What systems are affected by CVE-2016-7952?
CVE-2016-7952 affects Fedora versions 24 and 25 as well as X.org libXtst versions prior to 1.2.3.
What types of attacks exploit CVE-2016-7952?
CVE-2016-7952 can be exploited by remote X servers to trigger a denial of service.
Is CVE-2016-7952 limited to local network attacks?
No, CVE-2016-7952 can potentially be exploited over a network, allowing remote attackers to cause service interruptions.