suse · CVE-2016-7948

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-7948 severity moderate: SUSE including 71 source package names (beta1:libX11-6-1.6.2-8.1, beta1:libX11-data-1.6.2-8.1, …), 346 product×package rows across 86 product lines (Container caasp/v4/nginx-ingress-controller, HPE Helion OpenStack 8, … (86 product lines)): Fixed 301, Known Not Affected 45.

Description:

X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.