The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0180 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2023-43785:
    A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.
    This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on     the system.

    CVE-2023-43786:
    A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw     allows a local user to consume all available system resources and cause a denial of service condition.

    CVE-2023-43787:
    A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This     flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated     privileges.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3989-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bd92f1ab-690c-11ee-9ed0-001fc69cd6dc advisory.

  - A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.
    This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on     the system. (CVE-2023-43785)

  - A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw     allows a local user to consume all available system resources and cause a denial of service condition.
    (CVE-2023-43786)

  - A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This     flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated     privileges. (CVE-2023-43787)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libX11 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.
    This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on     the system. (CVE-2023-43785)

  - A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw     allows a local user to consume all available system resources and cause a denial of service condition.
    (CVE-2023-43786)

  - A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This     flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated     privileges. (CVE-2023-43787)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libX11 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.
    This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on     the system. (CVE-2023-43785)

  - A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw     allows a local user to consume all available system resources and cause a denial of service condition.
    (CVE-2023-43786)

  - A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This     flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated     privileges. (CVE-2023-43787)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8318:03 advisory.

    * libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)
      * libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)
      * libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
239210	TencentOS Server 3: libX11 (TSSA-2024:0180)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
182675	SUSE SLES12 Security Update : libX11 (SUSE-SU-2023:3989-1)	Nessus	SuSE Local Security Checks	2023/10/6	2023/10/16	high
182980	FreeBSD : 11/libX11 multiple vulnerabilities (bd92f1ab-690c-11ee-9ed0-001fc69cd6dc)	Nessus	FreeBSD Local Security Checks	2023/10/12	2023/10/16	high
188726	EulerOS 2.0 SP9 : libX11 (EulerOS-SA-2023-3310)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
190267	EulerOS 2.0 SP5 : libX11 (EulerOS-SA-2024-1150)	Nessus	Huawei Local Security Checks	2024/2/8	2024/2/8	high
292614	MiracleLinux 8 : libX11-1.6.8-8.el8 (AXSA:2024-8318:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high