Nixpkgs security tracker
6.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
3 packages
- libxisf
- libXinerama
- libxinerama
- @LeSuisse accepted
- @LeSuisse published on GitHub
Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
Affected products
- <1.8.4
Matching in nixpkgs
Ignored packages (3)
pkgs.libxisf
Library to load and write XISF format from PixInsight
pkgs.libXinerama
Library for Xinerama extension to X11 Protocol
pkgs.libxinerama
Library for Xinerama extension to X11 Protocol
6.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
3 packages
- libxisf
- libXinerama
- libxinerama
- @LeSuisse accepted
- @LeSuisse published on GitHub
Out-of-bounds read in libXi's XListInputDevices() class parsing
An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
Affected products
- <1.8.4
Matching in nixpkgs
Ignored packages (3)
pkgs.libxisf
Library to load and write XISF format from PixInsight
pkgs.libXinerama
Library for Xinerama extension to X11 Protocol
pkgs.libxinerama
Library for Xinerama extension to X11 Protocol
6.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
3 packages
- libxisf
- libXinerama
- libxinerama
- @LeSuisse accepted
- @LeSuisse published on GitHub
Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
Affected products
- <1.8.4
Matching in nixpkgs
Ignored packages (3)
pkgs.libxisf
Library to load and write XISF format from PixInsight
pkgs.libXinerama
Library for Xinerama extension to X11 Protocol
pkgs.libxinerama
Library for Xinerama extension to X11 Protocol
6.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
3 packages
- libxisf
- libXinerama
- libxinerama
- @LeSuisse accepted
- @LeSuisse published on GitHub
Out-of-bounds read in libXi's XListInputDevices()
An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
Affected products
- <1.8.4
Matching in nixpkgs
Ignored packages (3)
pkgs.libxisf
Library to load and write XISF format from PixInsight
pkgs.libXinerama
Library for Xinerama extension to X11 Protocol
pkgs.libxinerama
Library for Xinerama extension to X11 Protocol
7.4 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Changed (C)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Changed (C)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
3 packages
- libxisf
- libXinerama
- libxinerama
- @LeSuisse accepted
- @LeSuisse published on GitHub
Out-of-bounds read in libXi's XI2 class parser
An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
Affected products
- <1.8.4
Matching in nixpkgs
Ignored packages (3)
pkgs.libxisf
Library to load and write XISF format from PixInsight
pkgs.libXinerama
Library for Xinerama extension to X11 Protocol
pkgs.libxinerama
Library for Xinerama extension to X11 Protocol
6.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
3 packages
- libxisf
- libXinerama
- libxinerama
- @LeSuisse accepted
- @LeSuisse published on GitHub
Out-of-bounds read in libXi's XQueryDeviceState()
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
Affected products
- <1.8.4
Matching in nixpkgs
Ignored packages (3)
pkgs.libxisf
Library to load and write XISF format from PixInsight
pkgs.libXinerama
Library for Xinerama extension to X11 Protocol
pkgs.libxinerama
Library for Xinerama extension to X11 Protocol