Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libx11@2:1.6.2-3%2Bdeb8u1
Typedeb
Namespacedebian
Namelibx11
Version2:1.6.2-3+deb8u1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2:1.7.2-1+deb11u2
Latest_non_vulnerable_version2:1.7.2-1+deb11u2
Affected_by_vulnerabilities
0
url VCID-36yt-mzrz-5ues
vulnerability_id VCID-36yt-mzrz-5ues
summary An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14600.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14600.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14600
reference_id
reference_type
scores
0
value 0.11007
scoring_system epss
scoring_elements 0.93568
published_at 2026-06-04T12:55:00Z
1
value 0.11007
scoring_system epss
scoring_elements 0.93579
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14600
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14600
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14600
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1623242
reference_id 1623242
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1623242
5
reference_url https://security.gentoo.org/glsa/201811-01
reference_id GLSA-201811-01
reference_type
scores
url https://security.gentoo.org/glsa/201811-01
6
reference_url https://access.redhat.com/errata/RHSA-2019:2079
reference_id RHSA-2019:2079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2079
7
reference_url https://usn.ubuntu.com/3758-1/
reference_id USN-3758-1
reference_type
scores
url https://usn.ubuntu.com/3758-1/
8
reference_url https://usn.ubuntu.com/3758-2/
reference_id USN-3758-2
reference_type
scores
url https://usn.ubuntu.com/3758-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.6.7-1%2Bdeb10u2
purl pkg:deb/debian/libx11@2:1.6.7-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5utb-jbhq-k3ba
1
vulnerability VCID-bmmy-6s8t-skeb
2
vulnerability VCID-h7xt-jzsp-x7cn
3
vulnerability VCID-mvfu-znny-6ffx
4
vulnerability VCID-v6d5-epsk-73gg
5
vulnerability VCID-wapj-ku4e-t3bp
6
vulnerability VCID-y6zb-yxr1-5khh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.6.7-1%252Bdeb10u2
aliases CVE-2018-14600
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-36yt-mzrz-5ues
1
url VCID-4jn1-514n-dyez
vulnerability_id VCID-4jn1-514n-dyez
summary The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7942.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7942.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7942
reference_id
reference_type
scores
0
value 0.03155
scoring_system epss
scoring_elements 0.87147
published_at 2026-06-04T12:55:00Z
1
value 0.03155
scoring_system epss
scoring_elements 0.87169
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7942
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7942
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7942
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1381859
reference_id 1381859
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1381859
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840439
reference_id 840439
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840439
6
reference_url https://security.gentoo.org/glsa/201704-03
reference_id GLSA-201704-03
reference_type
scores
url https://security.gentoo.org/glsa/201704-03
7
reference_url https://usn.ubuntu.com/3758-1/
reference_id USN-3758-1
reference_type
scores
url https://usn.ubuntu.com/3758-1/
8
reference_url https://usn.ubuntu.com/3758-2/
reference_id USN-3758-2
reference_type
scores
url https://usn.ubuntu.com/3758-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.6.4-3%2Bdeb9u1
purl pkg:deb/debian/libx11@2:1.6.4-3%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-36yt-mzrz-5ues
1
vulnerability VCID-5utb-jbhq-k3ba
2
vulnerability VCID-7mmc-61am-zuah
3
vulnerability VCID-bmmy-6s8t-skeb
4
vulnerability VCID-bw68-vh4j-kfa1
5
vulnerability VCID-h7xt-jzsp-x7cn
6
vulnerability VCID-mvfu-znny-6ffx
7
vulnerability VCID-v6d5-epsk-73gg
8
vulnerability VCID-wapj-ku4e-t3bp
9
vulnerability VCID-y6zb-yxr1-5khh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.6.4-3%252Bdeb9u1
aliases CVE-2016-7942
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4jn1-514n-dyez
2
url VCID-5utb-jbhq-k3ba
vulnerability_id VCID-5utb-jbhq-k3ba
summary insufficient validation
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-31535.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-31535.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-31535
reference_id
reference_type
scores
0
value 0.05481
scoring_system epss
scoring_elements 0.90371
published_at 2026-06-04T12:55:00Z
1
value 0.05481
scoring_system epss
scoring_elements 0.90386
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-31535
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31535
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1961822
reference_id 1961822
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1961822
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988737
reference_id 988737
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988737
6
reference_url https://security.archlinux.org/ASA-202105-12
reference_id ASA-202105-12
reference_type
scores
url https://security.archlinux.org/ASA-202105-12
7
reference_url https://security.archlinux.org/AVG-1968
reference_id AVG-1968
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1968
8
reference_url https://security.gentoo.org/glsa/202105-16
reference_id GLSA-202105-16
reference_type
scores
url https://security.gentoo.org/glsa/202105-16
9
reference_url https://access.redhat.com/errata/RHSA-2021:3296
reference_id RHSA-2021:3296
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3296
10
reference_url https://access.redhat.com/errata/RHSA-2021:3477
reference_id RHSA-2021:3477
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3477
11
reference_url https://access.redhat.com/errata/RHSA-2021:4326
reference_id RHSA-2021:4326
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4326
12
reference_url https://usn.ubuntu.com/4966-1/
reference_id USN-4966-1
reference_type
scores
url https://usn.ubuntu.com/4966-1/
13
reference_url https://usn.ubuntu.com/4966-2/
reference_id USN-4966-2
reference_type
scores
url https://usn.ubuntu.com/4966-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.6.7-1%2Bdeb10u2
purl pkg:deb/debian/libx11@2:1.6.7-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5utb-jbhq-k3ba
1
vulnerability VCID-bmmy-6s8t-skeb
2
vulnerability VCID-h7xt-jzsp-x7cn
3
vulnerability VCID-mvfu-znny-6ffx
4
vulnerability VCID-v6d5-epsk-73gg
5
vulnerability VCID-wapj-ku4e-t3bp
6
vulnerability VCID-y6zb-yxr1-5khh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.6.7-1%252Bdeb10u2
1
url pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
purl pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.7.2-1%252Bdeb11u2
aliases CVE-2021-31535
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5utb-jbhq-k3ba
3
url VCID-7mmc-61am-zuah
vulnerability_id VCID-7mmc-61am-zuah
summary An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14599.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14599.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14599
reference_id
reference_type
scores
0
value 0.03108
scoring_system epss
scoring_elements 0.87061
published_at 2026-06-04T12:55:00Z
1
value 0.03108
scoring_system epss
scoring_elements 0.87083
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14599
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14599
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14599
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1623250
reference_id 1623250
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1623250
5
reference_url https://security.gentoo.org/glsa/201811-01
reference_id GLSA-201811-01
reference_type
scores
url https://security.gentoo.org/glsa/201811-01
6
reference_url https://access.redhat.com/errata/RHSA-2019:2079
reference_id RHSA-2019:2079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2079
7
reference_url https://usn.ubuntu.com/3758-1/
reference_id USN-3758-1
reference_type
scores
url https://usn.ubuntu.com/3758-1/
8
reference_url https://usn.ubuntu.com/3758-2/
reference_id USN-3758-2
reference_type
scores
url https://usn.ubuntu.com/3758-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.6.7-1%2Bdeb10u2
purl pkg:deb/debian/libx11@2:1.6.7-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5utb-jbhq-k3ba
1
vulnerability VCID-bmmy-6s8t-skeb
2
vulnerability VCID-h7xt-jzsp-x7cn
3
vulnerability VCID-mvfu-znny-6ffx
4
vulnerability VCID-v6d5-epsk-73gg
5
vulnerability VCID-wapj-ku4e-t3bp
6
vulnerability VCID-y6zb-yxr1-5khh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.6.7-1%252Bdeb10u2
aliases CVE-2018-14599
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7mmc-61am-zuah
4
url VCID-bmmy-6s8t-skeb
vulnerability_id VCID-bmmy-6s8t-skeb
summary A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43786.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43786.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43786
reference_id
reference_type
scores
0
value 0.00084
scoring_system epss
scoring_elements 0.24506
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43786
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2242253
reference_id 2242253
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T16:06:07Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2242253
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream
reference_id cpe:/a:redhat:enterprise_linux:8::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
reference_id cpe:/a:redhat:enterprise_linux:9::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6
reference_id cpe:/o:redhat:enterprise_linux:6
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
reference_id cpe:/o:redhat:enterprise_linux:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
11
reference_url https://access.redhat.com/security/cve/CVE-2023-43786
reference_id CVE-2023-43786
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T16:06:07Z/
url https://access.redhat.com/security/cve/CVE-2023-43786
12
reference_url https://security.gentoo.org/glsa/202407-21
reference_id GLSA-202407-21
reference_type
scores
url https://security.gentoo.org/glsa/202407-21
13
reference_url https://access.redhat.com/errata/RHSA-2024:2145
reference_id RHSA-2024:2145
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T16:06:07Z/
url https://access.redhat.com/errata/RHSA-2024:2145
14
reference_url https://access.redhat.com/errata/RHSA-2024:2973
reference_id RHSA-2024:2973
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T16:06:07Z/
url https://access.redhat.com/errata/RHSA-2024:2973
15
reference_url https://usn.ubuntu.com/6407-1/
reference_id USN-6407-1
reference_type
scores
url https://usn.ubuntu.com/6407-1/
16
reference_url https://usn.ubuntu.com/6407-2/
reference_id USN-6407-2
reference_type
scores
url https://usn.ubuntu.com/6407-2/
17
reference_url https://usn.ubuntu.com/6408-1/
reference_id USN-6408-1
reference_type
scores
url https://usn.ubuntu.com/6408-1/
18
reference_url https://usn.ubuntu.com/6408-2/
reference_id USN-6408-2
reference_type
scores
url https://usn.ubuntu.com/6408-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
purl pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.7.2-1%252Bdeb11u2
aliases CVE-2023-43786
risk_score 2.5
exploitability 0.5
weighted_severity 5.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bmmy-6s8t-skeb
5
url VCID-bw68-vh4j-kfa1
vulnerability_id VCID-bw68-vh4j-kfa1
summary An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14598.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14598.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14598
reference_id
reference_type
scores
0
value 0.03035
scoring_system epss
scoring_elements 0.86915
published_at 2026-06-04T12:55:00Z
1
value 0.03035
scoring_system epss
scoring_elements 0.86938
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14598
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14598
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14598
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1623238
reference_id 1623238
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1623238
5
reference_url https://security.gentoo.org/glsa/201811-01
reference_id GLSA-201811-01
reference_type
scores
url https://security.gentoo.org/glsa/201811-01
6
reference_url https://access.redhat.com/errata/RHSA-2019:2079
reference_id RHSA-2019:2079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2079
7
reference_url https://usn.ubuntu.com/3758-1/
reference_id USN-3758-1
reference_type
scores
url https://usn.ubuntu.com/3758-1/
8
reference_url https://usn.ubuntu.com/3758-2/
reference_id USN-3758-2
reference_type
scores
url https://usn.ubuntu.com/3758-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.6.7-1%2Bdeb10u2
purl pkg:deb/debian/libx11@2:1.6.7-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5utb-jbhq-k3ba
1
vulnerability VCID-bmmy-6s8t-skeb
2
vulnerability VCID-h7xt-jzsp-x7cn
3
vulnerability VCID-mvfu-znny-6ffx
4
vulnerability VCID-v6d5-epsk-73gg
5
vulnerability VCID-wapj-ku4e-t3bp
6
vulnerability VCID-y6zb-yxr1-5khh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.6.7-1%252Bdeb10u2
aliases CVE-2018-14598
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bw68-vh4j-kfa1
6
url VCID-h7xt-jzsp-x7cn
vulnerability_id VCID-h7xt-jzsp-x7cn
summary A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43785.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43785.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43785
reference_id
reference_type
scores
0
value 0.001
scoring_system epss
scoring_elements 0.27304
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43785
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2242252
reference_id 2242252
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T15:44:16Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2242252
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream
reference_id cpe:/a:redhat:enterprise_linux:8::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
reference_id cpe:/a:redhat:enterprise_linux:9::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6
reference_id cpe:/o:redhat:enterprise_linux:6
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
reference_id cpe:/o:redhat:enterprise_linux:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
11
reference_url https://access.redhat.com/security/cve/CVE-2023-43785
reference_id CVE-2023-43785
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T15:44:16Z/
url https://access.redhat.com/security/cve/CVE-2023-43785
12
reference_url https://security.gentoo.org/glsa/202407-21
reference_id GLSA-202407-21
reference_type
scores
url https://security.gentoo.org/glsa/202407-21
13
reference_url https://access.redhat.com/errata/RHSA-2024:2145
reference_id RHSA-2024:2145
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T15:44:16Z/
url https://access.redhat.com/errata/RHSA-2024:2145
14
reference_url https://access.redhat.com/errata/RHSA-2024:2973
reference_id RHSA-2024:2973
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T15:44:16Z/
url https://access.redhat.com/errata/RHSA-2024:2973
15
reference_url https://usn.ubuntu.com/6407-1/
reference_id USN-6407-1
reference_type
scores
url https://usn.ubuntu.com/6407-1/
16
reference_url https://usn.ubuntu.com/6407-2/
reference_id USN-6407-2
reference_type
scores
url https://usn.ubuntu.com/6407-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
purl pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.7.2-1%252Bdeb11u2
aliases CVE-2023-43785
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h7xt-jzsp-x7cn
7
url VCID-mvfu-znny-6ffx
vulnerability_id VCID-mvfu-znny-6ffx
summary An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14363.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14363.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-14363
reference_id
reference_type
scores
0
value 0.0015
scoring_system epss
scoring_elements 0.35193
published_at 2026-06-04T12:55:00Z
1
value 0.0015
scoring_system epss
scoring_elements 0.353
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-14363
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14363
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14363
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1872473
reference_id 1872473
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1872473
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969008
reference_id 969008
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969008
6
reference_url https://security.gentoo.org/glsa/202008-18
reference_id GLSA-202008-18
reference_type
scores
url https://security.gentoo.org/glsa/202008-18
7
reference_url https://access.redhat.com/errata/RHSA-2020:4908
reference_id RHSA-2020:4908
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4908
8
reference_url https://access.redhat.com/errata/RHSA-2020:4946
reference_id RHSA-2020:4946
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4946
9
reference_url https://access.redhat.com/errata/RHSA-2021:1804
reference_id RHSA-2021:1804
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1804
10
reference_url https://usn.ubuntu.com/4487-1/
reference_id USN-4487-1
reference_type
scores
url https://usn.ubuntu.com/4487-1/
11
reference_url https://usn.ubuntu.com/4487-2/
reference_id USN-4487-2
reference_type
scores
url https://usn.ubuntu.com/4487-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
purl pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.7.2-1%252Bdeb11u2
aliases CVE-2020-14363
risk_score 3.5
exploitability 0.5
weighted_severity 7.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mvfu-znny-6ffx
8
url VCID-tgmb-bm6x-hqgg
vulnerability_id VCID-tgmb-bm6x-hqgg
summary The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7943.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7943.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7943
reference_id
reference_type
scores
0
value 0.04712
scoring_system epss
scoring_elements 0.89561
published_at 2026-06-04T12:55:00Z
1
value 0.04712
scoring_system epss
scoring_elements 0.89578
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7943
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7943
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7943
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1381861
reference_id 1381861
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1381861
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840439
reference_id 840439
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840439
5
reference_url https://security.gentoo.org/glsa/201704-03
reference_id GLSA-201704-03
reference_type
scores
url https://security.gentoo.org/glsa/201704-03
6
reference_url https://usn.ubuntu.com/3758-1/
reference_id USN-3758-1
reference_type
scores
url https://usn.ubuntu.com/3758-1/
7
reference_url https://usn.ubuntu.com/3758-2/
reference_id USN-3758-2
reference_type
scores
url https://usn.ubuntu.com/3758-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.6.4-3%2Bdeb9u1
purl pkg:deb/debian/libx11@2:1.6.4-3%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-36yt-mzrz-5ues
1
vulnerability VCID-5utb-jbhq-k3ba
2
vulnerability VCID-7mmc-61am-zuah
3
vulnerability VCID-bmmy-6s8t-skeb
4
vulnerability VCID-bw68-vh4j-kfa1
5
vulnerability VCID-h7xt-jzsp-x7cn
6
vulnerability VCID-mvfu-znny-6ffx
7
vulnerability VCID-v6d5-epsk-73gg
8
vulnerability VCID-wapj-ku4e-t3bp
9
vulnerability VCID-y6zb-yxr1-5khh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.6.4-3%252Bdeb9u1
aliases CVE-2016-7943
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tgmb-bm6x-hqgg
9
url VCID-v6d5-epsk-73gg
vulnerability_id VCID-v6d5-epsk-73gg
summary A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3138.json
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3138.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3138
reference_id
reference_type
scores
0
value 0.00087
scoring_system epss
scoring_elements 0.2503
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3138
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3138
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3138
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038133
reference_id 1038133
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038133
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2213748
reference_id 2213748
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2213748
6
reference_url https://security.gentoo.org/glsa/202407-21
reference_id GLSA-202407-21
reference_type
scores
url https://security.gentoo.org/glsa/202407-21
7
reference_url https://access.redhat.com/errata/RHSA-2023:6497
reference_id RHSA-2023:6497
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6497
8
reference_url https://access.redhat.com/errata/RHSA-2023:7029
reference_id RHSA-2023:7029
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7029
9
reference_url https://access.redhat.com/errata/RHSA-2024:1088
reference_id RHSA-2024:1088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1088
10
reference_url https://access.redhat.com/errata/RHSA-2024:1417
reference_id RHSA-2024:1417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1417
11
reference_url https://usn.ubuntu.com/6168-1/
reference_id USN-6168-1
reference_type
scores
url https://usn.ubuntu.com/6168-1/
12
reference_url https://usn.ubuntu.com/6168-2/
reference_id USN-6168-2
reference_type
scores
url https://usn.ubuntu.com/6168-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
purl pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.7.2-1%252Bdeb11u2
aliases CVE-2023-3138
risk_score 3.3
exploitability 0.5
weighted_severity 6.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v6d5-epsk-73gg
10
url VCID-wapj-ku4e-t3bp
vulnerability_id VCID-wapj-ku4e-t3bp
summary A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43787.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43787.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43787
reference_id
reference_type
scores
0
value 0.00042
scoring_system epss
scoring_elements 0.13077
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43787
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2242254
reference_id 2242254
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-01-29T18:42:49Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2242254
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream
reference_id cpe:/a:redhat:enterprise_linux:8::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
reference_id cpe:/a:redhat:enterprise_linux:9::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6
reference_id cpe:/o:redhat:enterprise_linux:6
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
reference_id cpe:/o:redhat:enterprise_linux:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
11
reference_url https://access.redhat.com/security/cve/CVE-2023-43787
reference_id CVE-2023-43787
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-01-29T18:42:49Z/
url https://access.redhat.com/security/cve/CVE-2023-43787
12
reference_url https://security.gentoo.org/glsa/202407-21
reference_id GLSA-202407-21
reference_type
scores
url https://security.gentoo.org/glsa/202407-21
13
reference_url https://access.redhat.com/errata/RHSA-2024:2145
reference_id RHSA-2024:2145
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-01-29T18:42:49Z/
url https://access.redhat.com/errata/RHSA-2024:2145
14
reference_url https://access.redhat.com/errata/RHSA-2024:2973
reference_id RHSA-2024:2973
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-01-29T18:42:49Z/
url https://access.redhat.com/errata/RHSA-2024:2973
15
reference_url https://usn.ubuntu.com/6407-1/
reference_id USN-6407-1
reference_type
scores
url https://usn.ubuntu.com/6407-1/
16
reference_url https://usn.ubuntu.com/6407-2/
reference_id USN-6407-2
reference_type
scores
url https://usn.ubuntu.com/6407-2/
17
reference_url https://usn.ubuntu.com/6408-1/
reference_id USN-6408-1
reference_type
scores
url https://usn.ubuntu.com/6408-1/
18
reference_url https://usn.ubuntu.com/6408-2/
reference_id USN-6408-2
reference_type
scores
url https://usn.ubuntu.com/6408-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
purl pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.7.2-1%252Bdeb11u2
aliases CVE-2023-43787
risk_score 3.5
exploitability 0.5
weighted_severity 7.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wapj-ku4e-t3bp
11
url VCID-y6zb-yxr1-5khh
vulnerability_id VCID-y6zb-yxr1-5khh
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14344.json
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14344.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-14344
reference_id
reference_type
scores
0
value 0.00162
scoring_system epss
scoring_elements 0.36801
published_at 2026-06-04T12:55:00Z
1
value 0.00162
scoring_system epss
scoring_elements 0.36893
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-14344
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14344
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14344
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1862255
reference_id 1862255
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1862255
5
reference_url https://security.archlinux.org/AVG-1212
reference_id AVG-1212
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1212
6
reference_url https://security.gentoo.org/glsa/202008-18
reference_id GLSA-202008-18
reference_type
scores
url https://security.gentoo.org/glsa/202008-18
7
reference_url https://access.redhat.com/errata/RHSA-2021:1804
reference_id RHSA-2021:1804
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1804
8
reference_url https://usn.ubuntu.com/4487-1/
reference_id USN-4487-1
reference_type
scores
url https://usn.ubuntu.com/4487-1/
9
reference_url https://usn.ubuntu.com/4487-2/
reference_id USN-4487-2
reference_type
scores
url https://usn.ubuntu.com/4487-2/
fixed_packages
0
url pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
purl pkg:deb/debian/libx11@2:1.7.2-1%2Bdeb11u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.7.2-1%252Bdeb11u2
aliases CVE-2020-14344
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y6zb-yxr1-5khh
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libx11@2:1.6.2-3%252Bdeb8u1