libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | |||
| freeglut-0:3.0.0-8.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libdrm-0:2.4.91-3.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libepoxy-0:1.5.2-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libglvnd-1:1.0.1-0.8.git5baa1e5.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libinput-0:1.10.7-2.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libwacom-0:0.30-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libX11-0:1.6.5-2.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libxcb-0:1.13-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libXcursor-0:1.1.15-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libXfont-0:1.5.4-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libXfont2-0:2.0.3-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| libXres-0:1.2.0-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| mesa-0:18.0.5-3.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| mesa-demos-0:8.3.0-10.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| tigervnc-0:1.8.0-13.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| vulkan-0:1.1.73.0-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xcb-proto-0:1.13-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xkeyboard-config-0:2.24-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-ati-0:18.0.1-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-dummy-0:0.3.7-1.el7.1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-evdev-0:2.10.6-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-fbdev-0:0.5.0-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-intel-0:2.99.917-28.20180530.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-libinput-0:0.27.1-2.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-mouse-0:1.9.2-2.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-nouveau-1:1.0.15-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-openchrome-0:0.5.0-3.el7.1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-qxl-0:0.1.5-4.el7.1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-synaptics-0:1.9.0-2.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-v4l-0:0.2.0-49.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-vesa-0:2.4.0-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-vmmouse-0:13.1.0-1.el7.1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-vmware-0:13.2.1-1.el7.1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-void-0:1.4.1-2.el7.1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-drv-wacom-0:0.36.1-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-font-utils-1:7.5-21.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-proto-devel-0:2018.4-1.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-server-0:1.20.1-3.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-utils-0:7.5-23.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
| xorg-x11-xkb-utils-0:7.7-14.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3059 | 2018-10-30T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1469-1 | libxcursor security update |
EUVD |
EUVD-2015-9104 | _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. |
Ubuntu USN |
USN-3729-1 | libxcursor vulnerability |
No CVSS v4.0
No CVSS v3.1
This CVE is not in the KEV list.
Exploit prediction score: 5.7% (5.677% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|