Уязвимости libxi

Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.

Out-of-bounds read in libXi's XListInputDevices() class parsing

An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

Out-of-bounds read in libXi's XListInputDevices()

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

Out-of-bounds read in libXi's XI2 class parser

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()

An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.

Out-of-bounds read in libXi's XQueryDeviceState()

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

CVE-2016-7946

X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.

• Обновитесь до 2:1.7.6-1ubuntu0.1~esm1

CVE-2016-7945

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.

• Обновитесь до 2:1.7.6-1ubuntu0.1~esm1