CVE-2018-14599 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2018-14599

CVE-2018-14599

Published:August 24, 2018

Updated:May 17, 2026

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.

Related Resources (15)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGARUV66TS5OOSLR5A76BUB7SDV6GO4F/

https://security-tracker.debian.org/tracker/CVE-2018-14599

https://access.redhat.com/security/cve/CVE-2018-14599

https://lists.debian.org/debian-lts-announce/2018/08/msg00030.html

https://usn.ubuntu.com/3758-1/

https://lists.x.org/archives/xorg-announce/2018-August/002916.html

https://bugzilla.suse.com/show_bug.cgi?id=1102062

http://www.securitytracker.com/id/1041543

https://usn.ubuntu.com/3758-2/

https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=b469da1430cdcee06e31c6251b83aede072a1ff0

http://www.securityfocus.com/bid/105177

http://www.openwall.com/lists/oss-security/2018/08/21/6

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YGARUV66TS5OOSLR5A76BUB7SDV6GO4F/

https://security.gentoo.org/glsa/201811-01

https://access.redhat.com/errata/RHSA-2019:2079

Do you need more information?

CVSS v4

Base Score:

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

HIGH

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Weakness Type (CWE)

Off-by-one Error

CWE-193

EPSS

Base Score:

1.73