CVE-2016-7952

High

Published: 13/12/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the XRecordStartOfData, XRecordEndOfData, or XRecordClientDied category without a client sequence and with attached data.

Risk Assessment

An attacker can exploit this vulnerability to disrupt services, potentially leading to downtime for systems using libXtst.

Recommendation

It is recommended to update libXtst to version 1.2.3 or later to mitigate the risk associated with this vulnerability.

Other vulnerabilities in X.org libXtst

CVE-2016-7951Critical
Multiple integer overflows in X.org libXtst before version 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks.

Original NVD description (English source)

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.