{"id":"CVE-2023-43786","aliases":["ALPINE-CVE-2023-43786","ALSA-2024:2145","ALSA-2024:2973","AZL-31321","BELL-CVE-2023-43786","CLSA-2025-1745529850","DEBIAN-CVE-2023-43786","DLA-3602-1","DSA-5517-1","EUVD-2023-48163","GHSA-35w7-h3v9-8qw4","JLSEC-2026-474","MGASA-2023-0287","OESA-2023-1708","RHSA-2024:2145","RHSA-2024:2973","RLSA-2024:2145","RLSA-2024:2973","SUSE-SU-2023:3963-1","SUSE-SU-2023:3989-1","SUSE-SU-2024:2453-1","UBUNTU-CVE-2023-43786","USN-6407-1","USN-6407-2","USN-6408-1","USN-6408-2","openSUSE-SU-2024:13296-1"],"status":"published","title":"Libx11: stack exhaustion from infinite recursion in putsubimage()","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00475,"percentile":0.41344,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-400","CWE-835"],"published":"2023-10-03T00:00:00Z","modified":"2026-10-29T11:31:42Z","exploits":[{"source":"pocgithub","id":"jfrog/jfrog-CVE-2023-43786-libX11_DoS","title":"jfrog/jfrog-CVE-2023-43786-libX11_DoS","date":"2024-01-16","url":"https://github.com/jfrog/jfrog-CVE-2023-43786-libX11_DoS"}],"fixes":[{"ecosystem":"Alpine:v3.16","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libX11","fixed_in":["1.8.7-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"libx11","fixed_in":["1.8.7-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libX11","fixed_in":["1.7.0-7.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libX11-common","fixed_in":["1.7.0-7.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libX11-devel","fixed_in":["1.7.0-7.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libX11-xcb","fixed_in":["1.7.0-7.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libx11","fixed_in":["2:1.8.4-2+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libx11","fixed_in":["2:1.8.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libx11","fixed_in":["2:1.8.7-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Xorg_libX11_jll","fixed_in":["1.8.12+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libx11","fixed_in":["2:1.6.2-1ubuntu2.1+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxpm","fixed_in":["1:3.5.10-1ubuntu0.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libx11","fixed_in":["2:1.6.3-1ubuntu2.2+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxpm","fixed_in":["1:3.5.11-1ubuntu0.16.04.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libx11","fixed_in":["2:1.6.4-3ubuntu0.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxpm","fixed_in":["1:3.5.12-1ubuntu0.18.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libx11","fixed_in":["2:1.6.9-2ubuntu1.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxpm","fixed_in":["1:3.5.12-1ubuntu0.20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libx11","fixed_in":["2:1.7.5-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxpm","fixed_in":["1:3.5.12-1ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libx11","fixed_in":["2:1.8.6-1ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxpm","fixed_in":["1:3.5.12-1.1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libX11-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libX11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libX11-xcb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libX11-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libX11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libX11-xcb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2-r0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2-r0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2-r0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2-r0"},{"fixed":"1.8.7-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-7.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libX11-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-7.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libX11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-7.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libX11-xcb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-7.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.8.4-2+deb12u2"}]}],"versions":["2:1.8.4-2","2:1.8.4-2+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.8.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.8.7-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.7-1+deb10u4"}]}],"versions":["2:1.6.7-1","2:1.6.7-1+deb10u1","2:1.6.7-1+deb10u2","2:1.6.7-1+deb10u3"],"bundled":3},{"source":"osv","ecosystem":"Debian:11","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.2-1+deb11u2"}]}],"versions":["2:1.7.2-1","2:1.7.2-1+deb11u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.8.4-2+deb12u2"}]}],"versions":["2:1.8.4-2","2:1.8.4-2+deb12u1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"Xorg_libX11_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.12+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-1.5.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6-1.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.9-8.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.9-8.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-8.oe2203sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-8.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-8.oe2203sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libX11-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libX11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libX11-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libX11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libX11-xcb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libX11-xcb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libX11-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libX11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libX11-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libX11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libX11-xcb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libX11-xcb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-12.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-12.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-12.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-150000.3.33.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-1ubuntu2.1+esm5"}]}],"versions":["2:1.6.1-1ubuntu1","2:1.6.1-1ubuntu2","2:1.6.2-1ubuntu1","2:1.6.2-1ubuntu2","2:1.6.2-1ubuntu2.1","2:1.6.2-1ubuntu2.1+esm1","2:1.6.2-1ubuntu2.1+esm2","2:1.6.2-1ubuntu2.1+esm3","2:1.6.2-1ubuntu2.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.10-1ubuntu0.1+esm2"}]}],"versions":["1:3.5.10-1","1:3.5.10-1ubuntu0.1","1:3.5.10-1ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.4-4","2.3.4-5","2.3.4-5ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.3-1ubuntu2.2+esm4"}]}],"versions":["2:1.6.3-1ubuntu2","2:1.6.3-1ubuntu2.1","2:1.6.3-1ubuntu2.2","2:1.6.3-1ubuntu2.2+esm1","2:1.6.3-1ubuntu2.2+esm2","2:1.6.3-1ubuntu2.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.11-1ubuntu0.16.04.1+esm2"}]}],"versions":["1:3.5.11-1","1:3.5.11-1ubuntu0.16.04.1","1:3.5.11-1ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.4-8ubuntu1","2.3.4-9","2.3.4-10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.4-3ubuntu0.4+esm2"}]}],"versions":["2:1.6.4-3","2:1.6.4-3ubuntu0.1","2:1.6.4-3ubuntu0.2","2:1.6.4-3ubuntu0.3","2:1.6.4-3ubuntu0.4","2:1.6.4-3ubuntu0.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.18.04.2+esm1"}]}],"versions":["1:3.5.12-1","1:3.5.12-1ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.7-2","2.3.8-1","2.3.8-2","2.3.8-2build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.9-2ubuntu1.6"}]}],"versions":["2:1.6.8-1","2:1.6.9-2","2:1.6.9-2ubuntu1","2:1.6.9-2ubuntu1.1","2:1.6.9-2ubuntu1.2","2:1.6.9-2ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.20.04.2"}]}],"versions":["1:3.5.12-1","1:3.5.12-1ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.5-1ubuntu0.3"}]}],"versions":["2:1.7.2-1","2:1.7.2-2","2:1.7.2-2build1","2:1.7.5-1","2:1.7.5-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.22.04.2"}]}],"versions":["1:3.5.12-1","1:3.5.12-1build1","1:3.5.12-1build2","1:3.5.12-1ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.8.6-1ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1.1ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-3","2.3.8-3.1","2.3.8-3.1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-4","2.3.8-5"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-5build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-5","2.3.8-5build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.9-2ubuntu1.6"}]}],"versions":["2:1.6.8-1","2:1.6.9-2","2:1.6.9-2ubuntu1","2:1.6.9-2ubuntu1.1","2:1.6.9-2ubuntu1.2","2:1.6.9-2ubuntu1.5"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.5-1ubuntu0.3"}]}],"versions":["2:1.7.2-1","2:1.7.2-2","2:1.7.2-2build1","2:1.7.5-1","2:1.7.5-1ubuntu0.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-1ubuntu2.1+esm5"}]}],"versions":["2:1.6.1-1ubuntu1","2:1.6.1-1ubuntu2","2:1.6.2-1ubuntu1","2:1.6.2-1ubuntu2","2:1.6.2-1ubuntu2.1","2:1.6.2-1ubuntu2.1+esm1","2:1.6.2-1ubuntu2.1+esm2","2:1.6.2-1ubuntu2.1+esm3","2:1.6.2-1ubuntu2.1+esm4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.3-1ubuntu2.2+esm4"}]}],"versions":["2:1.6.3-1ubuntu2","2:1.6.3-1ubuntu2.1","2:1.6.3-1ubuntu2.2","2:1.6.3-1ubuntu2.2+esm1","2:1.6.3-1ubuntu2.2+esm2","2:1.6.3-1ubuntu2.2+esm3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.4-3ubuntu0.4+esm2"}]}],"versions":["2:1.6.4-3","2:1.6.4-3ubuntu0.1","2:1.6.4-3ubuntu0.2","2:1.6.4-3ubuntu0.3","2:1.6.4-3ubuntu0.4","2:1.6.4-3ubuntu0.4+esm1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.20.04.2"}]}],"versions":["1:3.5.12-1","1:3.5.12-1ubuntu0.20.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.22.04.2"}]}],"versions":["1:3.5.12-1","1:3.5.12-1build1","1:3.5.12-1build2","1:3.5.12-1ubuntu0.22.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.10-1ubuntu0.1+esm2"}]}],"versions":["1:3.5.10-1","1:3.5.10-1ubuntu0.1","1:3.5.10-1ubuntu0.1+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.11-1ubuntu0.16.04.1+esm2"}]}],"versions":["1:3.5.11-1","1:3.5.11-1ubuntu0.16.04.1","1:3.5.11-1ubuntu0.16.04.1+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.18.04.2+esm1"}]}],"versions":["1:3.5.12-1","1:3.5.12-1ubuntu0.18.04.2"],"bundled":4}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"x.org","product":"libx11"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2145","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2973","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43786","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242253","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/24/9","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63IBRFLQVZSMOAZBZOBKFWJP26ILRAGQ/","tags":["x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231103-0006/","tags":["x_transferred","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00005.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43786","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63IBRFLQVZSMOAZBZOBKFWJP26ILRAGQ"},{"url":"https://security.netapp.com/advisory/ntap-20231103-0006"},{"url":"https://github.com/advisories/GHSA-35w7-h3v9-8qw4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-43786","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43785","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43787","tags":["report"]},{"url":"https://bugzilla.redhat.com/2242252","tags":["report"]},{"url":"https://bugzilla.redhat.com/2242253","tags":["report"]},{"url":"https://bugzilla.redhat.com/2242254","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2145.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-2973.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-43786","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745529850.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43786.json","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/lib/libxpm","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-43786","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0287.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32358","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/10/03/1","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43787","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242254","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2145.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43785","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43786","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43787","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-23452","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2973.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2145","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2973","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233963-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215683","tags":["report"]},{"url":"https://bugzilla.suse.com/1215684","tags":["report"]},{"url":"https://bugzilla.suse.com/1215685","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43787","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233989-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242453-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-43786","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6407-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6408-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6407-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6408-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-43785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-43787","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-43788","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-43789","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-43786","title":"Libx11: stack exhaustion from infinite recursion in putsubimage()","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-10T12:26:07.399Z","modified":"2026-11-07T11:31:57.214Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T12:33:58.237937Z"}],"euvd":[{"id":"EUVD-2023-48163","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-10T12:26:07Z","modified":"2026-11-07T11:31:57Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T12:09:17.956424Z"}],"ghsa":[{"id":"GHSA-35w7-h3v9-8qw4","title":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function....","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-10T15:30:50Z","modified":"2025-11-04T21:31:49Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400","CWE-835"],"updated_at":"2026-11-02T15:04:37.582006Z"}],"nvd":[{"id":"CVE-2023-43786","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-10T13:15:22.023Z","modified":"2026-11-07T12:17:35.62Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-400","CWE-835"],"updated_at":"2026-11-07T14:05:24.982965Z"}],"osv":[{"id":"ALPINE-CVE-2023-43786","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-10T13:15:22.023Z","modified":"2026-10-26T17:17:58.643742841Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-31321","title":"CVE-2023-43786 affecting package libX11 for versions less than 1.8.7-1","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-10T13:15:22Z","modified":"2026-04-21T04:26:16.812434Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"BELL-CVE-2023-43786","status":"published","published":"2023-10-10T13:15:00Z","modified":"2026-09-06T07:15:23.743339781Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-43786","title":"Libx11: stack exhaustion from infinite recursion in putsubimage()","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-10T12:26:07.399Z","modified":"2026-11-09T02:30:37.708748556Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-09T03:16:44.651171Z"},{"id":"DEBIAN-CVE-2023-43786","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-10T13:15:22.023Z","modified":"2026-11-08T09:47:27.280109562Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-08T10:03:28.621517Z"},{"id":"JLSEC-2026-474","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2026-05-07T17:12:07.051Z","modified":"2026-07-18T00:02:06.146042883Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2023-1708","title":"libX11 security update","description":"Core X11 protocol client library.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.(CVE-2023-43785)\r\n\r\nA vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.(CVE-2023-43786)\r\n\r\nA vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.(CVE-2023-43787)","status":"published","published":"2023-10-13T11:06:09Z","modified":"2026-08-18T01:17:54.781953952Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2024:2145","title":"Red Hat Security Advisory: libX11 security update","status":"published","published":"2024-09-16T14:34:18Z","modified":"2026-03-18T11:35:03.633279Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2973","title":"Red Hat Security Advisory: libX11 security update","status":"published","published":"2024-09-16T14:34:28Z","modified":"2026-03-18T11:35:07.290275Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2024:2145","title":"Moderate: libX11 security update","description":"The libX11 packages contain the core X11 protocol client library.\n\nSecurity Fix(es):\n\n* libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)\n\n* libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)\n\n* libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:13:09.903227Z","modified":"2025-05-07T20:08:44.5351Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:2973","title":"Moderate: libX11 security update","description":"The libX11 packages contain the core X11 protocol client library.\n\nSecurity Fix(es):\n\n* libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)\n\n* libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)\n\n* libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T19:38:06.177708Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-43786","description":"A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.","status":"published","published":"2023-10-03T00:00:00Z","modified":"2026-10-17T12:56:25.791192325Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:2145","title":"Moderate: libX11 security update","description":"The libX11 packages contain the core X11 protocol client library.\n\nSecurity Fix(es):\n\n* libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)\n* libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)\n* libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:42.670079397Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2973","title":"Moderate: libX11 security update","description":"The libX11 packages contain the core X11 protocol client library.\n\nSecurity Fix(es):\n\n* libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)\n* libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)\n* libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.548168563Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1745529850","title":"libX11: Fix of CVE-2023-43786","description":"- CVE-2023-43786: fix stack exhaustion from infinite recursion in PutSubImage()","status":"published","published":"2025-04-24T21:24:17Z","modified":"2026-06-01T00:30:41.665029162Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DLA-3602-1","title":"libx11 - security update","status":"published","published":"2023-10-05T00:00:00Z","modified":"2026-03-09T01:01:20.888674Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5517-1","title":"libx11 - security update","status":"published","published":"2023-10-05T00:00:00Z","modified":"2026-03-09T02:09:32.679936Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0287","title":"Updated libX11 packages fix security vulnerabilities","description":"A vulnerability was found in libX11 due to a boundary condition within\nthe _XkbReadKeySyms() function. This flaw allows a local user to trigger\nan out-of-bounds read error and read the contents of memory on the\nsystem. (CVE-2023-43785)\n\nA vulnerability was found in libX11 due to an infinite loop within the\nPutSubImage() function. This flaw allows a local user to consume all\navailable system resources and cause a denial of service condition.\n(CVE-2023-43786)\n\nA vulnerability was found in libX11 due to an integer overflow within\nthe XCreateImage() function. This flaw allows a local user to trigger an\ninteger overflow and execute arbitrary code with elevated privileges.\n(CVE-2023-43787)\n","status":"published","published":"2023-10-13T22:56:51Z","modified":"2026-04-16T04:43:57.102145908Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13296-1","title":"libX11-6-1.8.7-1.1 on GA media","description":"These are all security issues fixed in the libX11-6-1.8.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:04:12.233486Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:3963-1","title":"Security update for libX11","description":"This update for libX11 fixes the following issues:\n\n- CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684).\n- CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685).\n- CVE-2023-43785: Fixed out-of-bounds memory access in _XkbReadKeySyms() (bsc#1215683).\n","status":"published","published":"2023-10-04T07:25:50Z","modified":"2026-02-04T04:13:05.767817Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3989-1","title":"Security update for libX11","description":"This update for libX11 fixes the following issues:\n\n- CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684).\n- CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685).\n- CVE-2023-43785: Fixed out-of-bounds memory access in _XkbReadKeySyms() (bsc#1215683).\n","status":"published","published":"2023-10-05T13:37:49Z","modified":"2026-02-04T04:36:01.098816Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2024:2453-1","title":"Security update for libX11","description":"This update for libX11 fixes the following issues:\n\n- CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684).\n- CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685).\n- CVE-2023-43785: Fixed out-of-bounds memory access in _XkbReadKeySyms() (bsc#1215683).\n","status":"published","published":"2024-07-12T13:54:40Z","modified":"2026-02-04T03:28:45.841813Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-6407-1","title":"libx11 vulnerabilities","description":"Gregory James Duck discovered that libx11 incorrectly handled certain\nkeyboard symbols. If a user were tricked into connecting to a malicious X\nserver, a remote attacker could use this issue to cause libx11 to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2023-43785)\n\nYair Mizrahi discovered that libx11 incorrectly handled certain malformed\nXPM image files. If a user were tricked into opening a specially crafted\nXPM image file, a remote attacker could possibly use this issue to consume\nmemory, leading to a denial of service. (CVE-2023-43786)\n\nYair Mizrahi discovered that libx11 incorrectly handled certain malformed\nXPM image files. If a user were tricked into opening a specially crafted\nXPM image file, a remote attacker could use this issue to cause libx11 to\ncrash, leading to a denial of service, or possibly execute arbitrary code.\n(CVE-2023-43787)\n","status":"published","published":"2023-10-03T16:57:57Z","modified":"2026-04-27T17:02:15.003669623Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6407-2","title":"libx11 vulnerabilities","description":"USN-6407-1 fixed several vulnerabilities in libx11. This update provides\nthe corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Gregory James Duck discovered that libx11 incorrectly handled certain\n keyboard symbols. If a user were tricked into connecting to a malicious X\n server, a remote attacker could use this issue to cause libx11 to crash,\n resulting in a denial of service, or possibly execute arbitrary code.\n (CVE-2023-43785)\n\n Yair Mizrahi discovered that libx11 incorrectly handled certain malformed\n XPM image files. If a user were tricked into opening a specially crafted\n XPM image file, a remote attacker could possibly use this issue to consume\n memory, leading to a denial of service. (CVE-2023-43786)\n\n Yair Mizrahi discovered that libx11 incorrectly handled certain malformed\n XPM image files. If a user were tricked into opening a specially crafted\n XPM image file, a remote attacker could use this issue to cause libx11 to\n crash, leading to a denial of service, or possibly execute arbitrary code.\n (CVE-2023-43787)\n","status":"published","published":"2023-10-10T14:35:08Z","modified":"2026-06-29T13:50:57.92727343Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6408-1","title":"libxpm vulnerabilities","description":"Yair Mizrahi discovered that libXpm incorrectly handled certain malformed\nXPM image files. If a user were tricked into opening a specially crafted\nXPM image file, a remote attacker could possibly use this issue to consume\nmemory, leading to a denial of service. (CVE-2023-43786)\n\nYair Mizrahi discovered that libXpm incorrectly handled certain malformed\nXPM image files. If a user were tricked into opening a specially crafted\nXPM image file, a remote attacker could use this issue to cause libXpm to\ncrash, leading to a denial of service, or possibly execute arbitrary code.\n(CVE-2023-43787)\n\nAlan Coopersmith discovered that libXpm incorrectly handled certain\nmalformed XPM image files. If a user were tricked into opening a specially\ncrafted XPM image file, a remote attacker could possibly use this issue to\ncause libXpm to crash, leading to a denial of service. (CVE-2023-43788,\nCVE-2023-43789)\n","status":"published","published":"2023-10-03T17:06:43Z","modified":"2026-04-27T16:53:04.60168Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6408-2","title":"libxpm vulnerabilities","description":"USN-6408-1 fixed several vulnerabilities in libXpm. This update provides\nthe corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Yair Mizrahi discovered that libXpm incorrectly handled certain malformed\n XPM image files. If a user were tricked into opening a specially crafted\n XPM image file, a remote attacker could possibly use this issue to consume\n memory, leading to a denial of service. (CVE-2023-43786)\n\n Yair Mizrahi discovered that libXpm incorrectly handled certain malformed\n XPM image files. If a user were tricked into opening a specially crafted\n XPM image file, a remote attacker could use this issue to cause libXpm to\n crash, leading to a denial of service, or possibly execute arbitrary code.\n (CVE-2023-43787)\n\n Alan Coopersmith discovered that libXpm incorrectly handled certain\n malformed XPM image files. If a user were tricked into opening a specially\n crafted XPM image file, a remote attacker could possibly use this issue to\n cause libXpm to crash, leading to a denial of service. (CVE-2023-43788,\n CVE-2023-43789)\n","status":"published","published":"2023-10-23T17:39:04Z","modified":"2026-06-29T13:50:58.226811624Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}