xorg-x11-libX11 (SUSE:Linux Enterprise Software Development Kit 11 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 11 SP4 package xorg-x11-libX11, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2016-7942 — CVSS 9.8 (critical): The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and…
• CVE-2018-14599 — CVSS 9.8 (critical): An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by…
• CVE-2018-14600 — CVSS 9.8 (critical): An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of…
• CVE-2013-7439 — CVSS 7.5 (high): Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow…
• CVE-2018-14598 — CVSS 7.5 (high): An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first…
• CVE-2013-1997 — CVSS 6.8 (medium): Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and…