Vulnerabilities > CVE-2023-43786 - Infinite Loop vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2023-10-10

Updated: 2024-04-30

Summary

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.

Vulnerable Configurations

Part	Description	Count
Application	X.Org X.Org Libx11 - X.Org Libx11 1.0.1 X.Org Libx11 1.0.2 X.Org Libx11 1.0.3 X.Org Libx11 1.0.99.1 X.Org Libx11 1.0.99.2 X.Org Libx11 1.1 X.Org Libx11 1.1.1 X.Org Libx11 1.1.2 X.Org Libx11 1.1.3 X.Org Libx11 1.1.4 X.Org Libx11 1.1.5 X.Org Libx11 1.1.6 X.Org Libx11 1.1.99.1 X.Org Libx11 1.1.99.2 X.Org Libx11 1.2 X.Org Libx11 1.2.1 X.Org Libx11 1.2.2 X.Org Libx11 1.2.99.901 X.Org Libx11 1.3 X.Org Libx11 1.3.1 X.Org Libx11 1.3.2 X.Org Libx11 1.3.3 X.Org Libx11 1.3.4 X.Org Libx11 1.3.5 X.Org Libx11 1.3.6 X.Org Libx11 1.3.99.901 X.Org Libx11 1.3.99.902 X.Org Libx11 1.3.99.903 X.Org Libx11 1.4.0 X.Org Libx11 1.4.1 X.Org Libx11 1.4.2 X.Org Libx11 1.4.3 X.Org Libx11 1.4.4 X.Org Libx11 1.4.99.1 X.Org Libx11 1.4.99.901 X.Org Libx11 1.4.99.902 X.Org Libx11 1.5.0 X.Org Libx11 1.5.99.901 X.Org Libx11 1.5.99.902 X.Org Libx11 1.6.0 X.Org Libx11 1.6.1 X.Org Libx11 1.6.2 X.Org Libx11 1.6.3 X.Org Libx11 1.6.4 X.Org Libx11 1.6.5 X.Org Libx11 1.6.6 X.Org Libx11 1.6.7 X.Org Libx11 1.6.8 X.Org Libx11 1.6.9 X.Org Libx11 1.6.10 X.Org Libx11 1.6.12 X.Org Libx11 1.7.0 X.Org Libx11 1.7.1 X.Org Libx11 1.7.2 X.Org Libx11 1.7.3 X.Org Libx11 1.7.3.1 X.Org Libx11 1.7.4 X.Org Libx11 1.7.5 X.Org Libx11 1.8 X.Org Libx11 1.8.1 X.Org Libx11 1.8.2 X.Org Libx11 1.8.3 X.Org Libx11 1.8.4 X.Org Libx11 1.8.5 X.Org Libx11 1.8.6	69
OS	Redhat Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0	2
OS	Fedoraproject Fedoraproject Fedora 38	1

Common Weakness Enumeration (CWE)

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References