Libx11
Vendor:
First CVE: Nov 3, 2006 · Active for 19 years
15
Total CVEs
More Total CVEs than 92% of tracked products
1.9
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libx11 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 3, 2006
19 years ago
Most Recent CVE
Oct 10, 2023
1,019 days ago
CVE Severity & Scoring
Libx1115 CVEs
20%
40%
33%
All CVEs352,427 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local5 (33.3%)
Network7 (46.7%)
Unknown3 (20.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (80.0%)
High0 (0.0%)
Unknown3 (20.0%)
User Interaction
None12 (80.0%)
Unknown3 (20.0%)
Required0 (0.0%)
Privileges Required
Low4 (26.7%)
High1 (6.7%)
None7 (46.7%)
Unknown3 (20.0%)
Top CVEs
Signals from CVEs in this product scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-31535CRITICAL LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side col | May 27, 2021 | 9.8 | 36 | NO | NO |
CVE-2018-14600CRITICAL An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write | Aug 24, 2018 | 9.8 | 35 | NO | NO |
CVE-2018-14599CRITICAL An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS | Aug 24, 2018 | 9.8 | 32 | NO | NO |
CVE-2016-7943CRITICAL The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operatio | Dec 13, 2016 | 9.8 | 32 | NO | NO |
CVE-2016-7942CRITICAL The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read | Dec 13, 2016 | 9.8 | 31 | NO | NO |
CVE-2023-43787HIGH A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrar | Oct 10, 2023 | 7.8 | 25 | NO | NO |
CVE-2020-14363HIGH An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, | Sep 11, 2020 | 7.8 | 25 | NO | NO |
CVE-2013-7439HIGH Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified imp | Apr 16, 2015 | 7.5 | 24 | NO | NO |
CVE-2007-1667HIGH Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote | Mar 24, 2007 | 9.3 | 24 | NO | NO |
CVE-2023-3138HIGH A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Erro | Jun 28, 2023 | 7.5 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (15 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (15 CVEs).
Media Mentions
Signals from CVEs in this product scope (15 CVEs).
Top CNAs Publishing CVEs For Libx11
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.5.99.902 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.5.99.901 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.5.0 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.4.99.902 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.4.99.901 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.4.4 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.4.3 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.4.2 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.4.1 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.4.0 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.99.903 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.99.902 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.99.901 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.6 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.5 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.4 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.3 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.2 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3.1 | 1 | 7.5 | 4.3% | 0 | 0 |
| 1.3 | 1 | 7.5 | 4.3% | 0 | 0 |