CVE-2023-43785: Libx11: out-of-bounds memory access in _xkbreadkeysyms()
A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.
Other sources
A vulnerability was found in libX11 where the vulnerability exists due to a boundary condition within the XkbReadKeySyms() function, a local user can trigger an out-of-bounds read error and read contents of memory on the system.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libX11to a version that resolves this vulnerability.Fixed in 1.8.7 - Upgrade
Upgrade
debian/libx11to a version that resolves this vulnerability.Fixed in 2:1.8.4-2+deb12u2 - Upgrade
Upgrade
debian/libx11to a version that resolves this vulnerability.Fixed in 2:1.8.7-1 - Upgrade
Upgrade
debian/libx11to a version that resolves this vulnerability.Fixed in 2:1.8.4-2+deb12u2Fixed in 2:1.8.12-1Fixed in 2:1.8.14-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-43785.
What is the title of this vulnerability?
The title of this vulnerability is 'out-of-bounds memory access in _XkbReadKeySyms()'.
What is the affected software?
The affected software is libX11.
What is the severity of the vulnerability?
The severity of the vulnerability is not specified in the provided information.
What is the remedy for this vulnerability?
The remedy for this vulnerability is to update libX11 to version 2:1.6.9-2ubuntu1.6 or apply the specified remedies for other versions.