CVE-2018-14599: Critical severity X.Org libX11 vulnerability
An issue was discovered in libX11 through 1.6.5. Functions GetFPath.c:XGetFontPath, ListExt.c:XListExtensions and FontNames.c:XListFonts are vulnerable to an off-by-one error when parsing list of strings returned by malicious server responses, leading to DoS.
References: http://www.openwall.com/lists/oss-security/2018/08/21/6 https://lists.x.org/archives/xorg-announce/2018-August/002916.html
Upstream Patch: https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=b469da1430cdcee06e31c6251b83aede072a1ff0
Other sources
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-14599?
CVE-2018-14599 is a vulnerability in libX11 through 1.6.5 that allows for a possible denial-of-service or unspecified other impact.
How severe is CVE-2018-14599?
CVE-2018-14599 has a severity rating of 9.8 (Critical).
Which software versions are affected by CVE-2018-14599?
The affected software versions of CVE-2018-14599 include libX11 through 1.6.5.
How can I fix CVE-2018-14599?
To fix CVE-2018-14599, update libX11 to version 1.6.6 or later.
Where can I find more information about CVE-2018-14599?
You can find more information about CVE-2018-14599 at the following references: [http://www.openwall.com/lists/oss-security/2018/08/21/6](http://www.openwall.com/lists/oss-security/2018/08/21/6), [https://lists.x.org/archives/xorg-announce/2018-August/002916.html](https://lists.x.org/archives/xorg-announce/2018-August/002916.html), [https://bugzilla.suse.com/show_bug.cgi?id=1102062](https://bugzilla.suse.com/show_bug.cgi?id=1102062).