CVE-2011-0465
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute...
9.3 HighFix available
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
Exploit likelihood
5.78%Up 1.4 points since Feb 4, 2022
What each source reports
NVD Score used
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
- Record
CVE-2011-0465- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
- Record
CVE-2011-0465- Updated
- 2026-11-02
EUVDEUVD-2011-0485 No score
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
- Record
EUVD-2011-0485- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wphx-j4h9-hfr8 No score
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute...
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
- Record
GHSA-wphx-j4h9-hfr8- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
- Record
CVE-2011-0465- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-0465 No score
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
- Record
DEBIAN-CVE-2011-0465- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10431-1 No score
xorg-x11-7.6_1-16.2 on GA media
These are all security issues fixed in the xorg-x11-7.6_1-16.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10431-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
x11-xserver-utilsDebian:12 |
before 7.6+2 | 7.6+2 |
x11-xserver-utilsDebian:13 |
before 7.6+2 | 7.6+2 |
x11-xserver-utilsDebian:14 |
before 7.6+2 | 7.6+2 |
x11-xserver-utilsDebian:6.0 |
before 7.5+3, plus listed versions 7.5+2 |
7.5+3 |
x11-xserver-utilsDebian:5.0 |
before 7.3+6, plus listed versions 7.3+5 |
7.3+6 |
xorg-x11Red Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XnestRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
Show 77 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xorg-x11-XvfbRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-develRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-docRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-libsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-sdkRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-toolsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-twmRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xauthRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xdmRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xfsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11Red Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XnestRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-develRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-docRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-libsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-sdkRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-toolsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-twmRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xauthRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xdmRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xfsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11Red Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XnestRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-develRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-docRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-libsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-sdkRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-toolsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-twmRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xauthRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xdmRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xfsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11Red Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XnestRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-develRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-docRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-libsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-sdkRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-toolsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-twmRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xauthRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xdmRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-xfsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.67 | 0:6.8.2-1.EL.67 |
xorg-x11-server-utilsRed Hat:enterprise_linux:5::server |
before 0:7.1-5.el5_6.1 | 0:7.1-5.el5_6.1 |
xorg-x11-server-utils-debuginfoRed Hat:enterprise_linux:5::server |
before 0:7.1-5.el5_6.1 | 0:7.1-5.el5_6.1 |
xorg-x11-server-utilsRed Hat:enterprise_linux:6::client |
before 0:7.4-15.el6_0.1 | 0:7.4-15.el6_0.1 |
xorg-x11-server-utils-debuginfoRed Hat:enterprise_linux:6::client |
before 0:7.4-15.el6_0.1 | 0:7.4-15.el6_0.1 |
xorg-x11-server-utilsRed Hat:enterprise_linux:6::computenode |
before 0:7.4-15.el6_0.1 | 0:7.4-15.el6_0.1 |
xorg-x11-server-utils-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:7.4-15.el6_0.1 | 0:7.4-15.el6_0.1 |
xorg-x11-server-utilsRed Hat:enterprise_linux:6::server |
before 0:7.4-15.el6_0.1 | 0:7.4-15.el6_0.1 |
xorg-x11-server-utils-debuginfoRed Hat:enterprise_linux:6::server |
before 0:7.4-15.el6_0.1 | 0:7.4-15.el6_0.1 |
xorg-x11-server-utilsRed Hat:enterprise_linux:6::workstation |
before 0:7.4-15.el6_0.1 | 0:7.4-15.el6_0.1 |
xorg-x11-server-utils-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:7.4-15.el6_0.1 | 0:7.4-15.el6_0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0465 is a high vulnerability (CVSS 9.3) in Matthias Hopf Xrdb, published April 8, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.78%, the 93rd percentile. Fixed in x11-xserver-utils 7.6+2.
References
lists.freedesktop.org/archives/xorg-announce/2011-April/001636.html
redhat.com/support/errata/RHSA-2011-0433.html
vupen.com/english/advisories/2011/0966
secunia.com/advisories/44040
debian.org/security/2011/dsa-2213
Show 34 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=680196
securitytracker.com/id?1025317
securityfocus.com/bid/47189
lists.fedoraproject.org/pipermail/package-announce/2011-April/057928.html
cgit.freedesktop.org/xorg/app/xrdb/commit?id=1027d5df07398c1507fb1fe3a9981aa6b4bc3a56
exchange.xforce.ibmcloud.com/vulnerabilities/66585
ubuntu.com/usn/USN-1107-1
slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.465748
mandriva.com/security/advisories?name=MDVSA-2011:076
lists.opensuse.org/opensuse-security-announce/2011-04/msg00002.html
lwn.net/Articles/437150
nvd.nist.gov/vuln/detail/CVE-2011-0465
github.com/advisories/GHSA-wphx-j4h9-hfr8
security-tracker.debian.org/tracker/CVE-2011-0465
access.redhat.com/errata/RHSA-2011:0432
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0432.json
cve.org/CVERecord?id=CVE-2011-0465
suse.com/security/cve/CVE-2011-0465