| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 4.8 | $0-$5k | 0.00 |
Summary
A vulnerability described as problematic has been identified in X.org libX11. This vulnerability affects the function PutSubImage of the file PutImage.c. Executing a manipulation can lead to recursion.
This vulnerability appears as CVE-2023-43786. There is no available exploit.
Applying a patch is advised to resolve this issue.
Details
A vulnerability was found in X.org libX11 (unknown version). It has been declared as problematic. This vulnerability affects the function PutSubImage of the file PutImage.c. The manipulation with an unknown input leads to a recursion vulnerability. The CWE definition for the vulnerability is CWE-674. The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack. As an impact it is known to affect availability.
The weakness was presented 10/04/2023. The advisory is shared for download at cgit.freedesktop.org. This vulnerability was named CVE-2023-43786 since 09/22/2023. There are known technical details, but no exploit is available.
The vulnerability scanner Nessus provides a plugin with the ID 235594 (RockyLinux 9 : libX11 (RLSA-2024:2145)), which helps to determine the existence of the flaw in a target environment.
Applying a patch is able to eliminate this problem. The bugfix is ready for download at cgit.freedesktop.org. The advisory contains the following remark:
CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage()
The vulnerability is also documented in the vulnerability database at Tenable (235594). VulDB is the best source for vulnerability data and more expert information about this specific topic.
Product
Vendor
Name
License
Website
- Vendor: https://www.x.org/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 4.8VulDB Meta Temp Score: 4.8
VulDB Base Score: 3.5
VulDB Temp Score: 3.4
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 5.5
NVD Vector: 🔍
CNA Base Score: 5.5
CNA Vector (Red Hat, Inc.): 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
Exploiting
Class: RecursionCWE: CWE-674 / CWE-404
CAPEC: 🔍
ATT&CK: 🔍
Physical: Partially
Local: Yes
Remote: Partially
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Nessus ID: 235594
Nessus Name: RockyLinux 9 : libX11 (RLSA-2024:2145)
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: PatchStatus: 🔍
0-Day Time: 🔍
Patch: cgit.freedesktop.org
Timeline
09/22/2023 🔍10/04/2023 🔍
10/04/2023 🔍
05/08/2025 🔍
Sources
Vendor: x.orgAdvisory: cgit.freedesktop.org
Status: Confirmed
CVE: CVE-2023-43786 (🔍)
GCVE (CVE): GCVE-0-2023-43786
GCVE (VulDB): GCVE-100-241288
Entry
Created: 10/04/2023 17:29Updated: 05/08/2025 07:55
Changes: 10/04/2023 17:29 (39), 10/25/2023 15:22 (1), 10/25/2023 15:28 (21), 09/16/2024 17:44 (16), 05/08/2025 07:55 (2)
Complete: 🔍
Cache ID: 216::103
VulDB is the best source for vulnerability data and more expert information about this specific topic.
No comments yet. Languages: en.
Please log in to comment.