Detections
Analytics
EulerOS 2.0 SP3 : libX11 (EulerOS-SA-2019-2624)
critical Nessus Plugin ID 132159
Synopsis
The remote EulerOS host is missing multiple security updates.Description
According to the versions of the libX11 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :- An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.(CVE-2018-14600)
- An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.(CVE-2018-14599)
- An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).(CVE-2018-14598)
Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Update the affected libX11 packages.See Also
Plugin Details
Severity: Critical
ID: 132159
File Name: EulerOS_SA-2019-2624.nasl
Version: 1.6
Type: local
Family: Huawei Local Security Checks
Published: 12/18/2019
Updated: 4/3/2024
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2018-14600
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:huawei:euleros:libx11, p-cpe:/a:huawei:euleros:libx11-common, cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:libx11-devel
Required KB Items: Host/local_checks_enabled, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp
Excluded KB Items: Host/EulerOS/uvp_version
Exploit Ease: No known exploits are available
Patch Publication Date: 12/18/2019