CVE-2018-14599

Name of the Vulnerable Software and Affected Versions libX11 versions 1.6.5 and earlier

Description The issue is related to an off-by-one error in the XListExtensions function, caused by malicious server responses. This can lead to a denial of service (DoS) or possibly other unspecified impacts. The vulnerability can be exploited by a remote attacker using a specially crafted server response.

Recommendations For libX11 versions 1.6.5 and earlier, consider disabling the XListExtensions function as a temporary workaround until a patch is available. Restrict access to the vulnerable ListExt.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.