PT-2016-7445

CVE-2016-7952

·

Published

2016-10-12

·

Updated

2026-10-19

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions X.org libXtst versions prior to 1.2.3
Description The issue allows remote X servers to cause a denial of service, resulting in an infinite loop. This can be triggered via a reply in certain categories without a client sequence and with attached data, specifically the XRecordStartOfData, XRecordEndOfData, or XRecordClientDied categories.
Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to remote X servers to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2020-3326
ALT-PU-2020-3330
ALT-PU-2020-3399
DLA-686-1
MGASA-2018-0011
SUSE-SU-2016:2505-1
SUSE-SU-2016:2828-1
SUSE-SU-2016:3189-1
USN-8939-1
Found an issue in the description? Have something to add? Feel free to write us 👾