CVE catalog

CVE-2021-31535

libx11: CVE-2021-31535

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
10.63% · Oct 25, 2026

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibx11sid2:1.8.14-1fixed
Debianlibx11forky2:1.8.13-1fixed
Debianlibx11trixie2:1.8.12-1fixed
Debianlibx11bookworm2:1.8.4-2+deb12u2fixed
Debianlibx11bookworm-security2:1.8.4-2+deb12u2fixed
Alpinelibx113.101.6.12-r1fixed
Alpinelibx113.111.6.12-r1fixed
Alpinelibx113.121.6.12-r1fixed
Alpinelibx113.131.7.1-r0fixed
Alpinelibx113.141.7.1-r0fixed
Alpinelibx113.151.7.1-r0fixed
Alpinelibx113.161.7.1-r0fixed
Alpinelibx113.171.7.1-r0fixed
Alpinelibx113.181.7.1-r0fixed
Alpinelibx113.191.7.1-r0fixed
Alpinelibx113.201.7.1-r0fixed
Alpinelibx113.211.7.1-r0fixed
Alpinelibx113.221.7.1-r0fixed
Alpinelibx113.231.7.1-r0fixed
Alpinelibx113.241.7.1-r0fixed
Ubuntulibx11pro2:1.6.3-1ubuntu2vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.1vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2+esm1fixed
Ubuntulibx11pro2:1.6.3-1ubuntu2vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.1vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2+esm1fixed
Ubuntulibx1118.042:1.6.4-3vulnerable
Ubuntulibx1118.042:1.6.4-3ubuntu0.1vulnerable
Ubuntulibx1118.042:1.6.4-3ubuntu0.2vulnerable
Ubuntulibx1118.042:1.6.4-3ubuntu0.3vulnerable
Ubuntulibx1118.042:1.6.4-3ubuntu0.4fixed
Ubuntulibx1120.042:1.6.8-1vulnerable
Ubuntulibx1120.042:1.6.9-2vulnerable
Ubuntulibx1120.042:1.6.9-2ubuntu1vulnerable
Ubuntulibx1120.042:1.6.9-2ubuntu1.1vulnerable
Ubuntulibx1120.042:1.6.9-2ubuntu1.2fixed
Ubuntulibx1118.042:1.6.4-3vulnerable
Ubuntulibx1118.042:1.6.4-3ubuntu0.1vulnerable
Ubuntulibx1118.042:1.6.4-3ubuntu0.2vulnerable
Ubuntulibx1118.042:1.6.4-3ubuntu0.3vulnerable
Ubuntulibx1118.042:1.6.4-3ubuntu0.4fixed
Ubuntulibx1120.042:1.6.8-1vulnerable
Ubuntulibx1120.042:1.6.9-2vulnerable
Ubuntulibx1120.042:1.6.9-2ubuntu1vulnerable
Ubuntulibx1120.042:1.6.9-2ubuntu1.1vulnerable
Ubuntulibx1120.042:1.6.9-2ubuntu1.2fixed
OpensuselibX11leap 15.31.6.5-3.21.1fixed
OpensuselibX11leap 15.21.6.5-lp152.5.18.1fixed
OpensuselibX11leap 15.21.6.5-lp152.5.15.1fixed
SuselibX11hpe helion openstack 81.6.2-12.21.1fixed
SuselibX11openstack cloud 81.6.2-12.21.1fixed
SuselibX11openstack cloud 91.6.2-12.21.1fixed
SuselibX11openstack cloud crowbar 81.6.2-12.21.1fixed
SuselibX11openstack cloud crowbar 91.6.2-12.21.1fixed
SuselibX11linux enterprise server for sap applications 12 sp31.6.2-12.21.1fixed
SuselibX11linux enterprise server for sap applications 12 sp41.6.2-12.21.1fixed
SuselibX11linux enterprise software development kit 12 sp51.6.2-12.21.1fixed
SuselibX11linux enterprise server 12 sp2-bcl1.6.2-12.21.1fixed
SuselibX11linux enterprise server 12 sp3-ltss1.6.2-12.21.1fixed
SuselibX11linux enterprise server 12 sp3-bcl1.6.2-12.21.1fixed
SuselibX11linux enterprise server 12 sp4-ltss1.6.2-12.21.1fixed
SuselibX11linux enterprise server 12 sp51.6.2-12.21.1fixed
SuselibX11linux enterprise server for sap applications 12 sp51.6.2-12.21.1fixed
Susexorg-x11-libX11linux enterprise point of sale 11 sp37.4-5.11.72.27.1fixed
Susexorg-x11-libX11linux enterprise server 11 sp4-ltss7.4-5.11.72.27.1fixed
SuselibX11linux enterprise module for basesystem 15 sp21.6.5-3.21.1fixed
SuselibX11linux enterprise module for basesystem 15 sp31.6.5-3.21.1fixed
SuselibX11linux enterprise high performance computing 15-espos1.6.5-3.21.1fixed
SuselibX11linux enterprise high performance computing 15-ltss1.6.5-3.21.1fixed
SuselibX11linux enterprise high performance computing 15 sp1-espos1.6.5-3.21.1fixed
SuselibX11linux enterprise high performance computing 15 sp1-ltss1.6.5-3.21.1fixed
SuselibX11linux enterprise server 15-ltss1.6.5-3.21.1fixed
SuselibX11linux enterprise server 15 sp1-bcl1.6.5-3.21.1fixed
SuselibX11linux enterprise server 15 sp1-ltss1.6.5-3.21.1fixed
SuselibX11linux enterprise server for sap applications 151.6.5-3.21.1fixed
SuselibX11linux enterprise server for sap applications 15 sp11.6.5-3.21.1fixed
SuselibX11manager proxy 4.01.6.5-3.21.1fixed
SuselibX11manager retail branch server 4.01.6.5-3.21.1fixed
SuselibX11manager server 4.01.6.5-3.21.1fixed
SuselibX11linux enterprise micro 5.01.6.5-3.21.1fixed
SuselibX11enterprise storage 61.6.5-3.21.1fixed
SuselibX11linux enterprise software development kit 12 sp51.6.2-12.18.1fixed
SuselibX11linux enterprise server 12 sp51.6.2-12.18.1fixed
SuselibX11linux enterprise server for sap applications 12 sp51.6.2-12.18.1fixed
SuselibX11linux enterprise module for basesystem 15 sp21.6.5-3.18.1fixed
SuselibX11linux enterprise module for basesystem 15 sp31.6.5-3.18.1fixed
SuselibX11linux enterprise micro 5.01.6.5-3.18.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibx11sourcesid2:1.7.1-1not yet assignedNot reported[988737]
Debianlibx11sourceforky2:1.7.1-1not yet assignedNot reported[988737]
Debianlibx11sourcetrixie2:1.7.1-1not yet assignedNot reported[988737]
Debianlibx11sourcebookworm2:1.7.1-1not yet assignedNot reported[988737]
Alpinelibx11apk3.101.6.12-r1Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.111.6.12-r1Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.121.6.12-r1Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.131.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.141.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.151.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.161.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.171.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.181.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.191.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.201.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.211.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.221.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.231.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Alpinelibx11apk3.241.7.1-r0Not reportedALPINE-CVE-2021-31535Not reported
Ubuntulibx11debpro2:1.6.3-1ubuntu2.2+esm1Not reportedUSN-4966-2Not reported
Ubuntulibx11debpro2:1.6.3-1ubuntu2.2+esm1Not reportedUBUNTU-CVE-2021-31535Not reported
Ubuntulibx11deb18.042:1.6.4-3ubuntu0.4Not reportedUBUNTU-CVE-2021-31535Not reported
Ubuntulibx11deb20.042:1.6.9-2ubuntu1.2Not reportedUBUNTU-CVE-2021-31535Not reported
Ubuntulibx11deb18.042:1.6.4-3ubuntu0.4Not reportedUSN-4966-1Not reported
Ubuntulibx11deb20.042:1.6.9-2ubuntu1.2Not reportedUSN-4966-1Not reported
OpensuselibX11rpmleap 15.31.6.5-3.21.1Not reportedOPENSUSE-SU-2021:1897-1Not reported
OpensuselibX11rpmleap 15.21.6.5-lp152.5.18.1Not reportedOPENSUSE-SU-2021:0857-1Not reported
OpensuselibX11rpmleap 15.21.6.5-lp152.5.15.1Not reportedOPENSUSE-SU-2021:0807-1Not reported
SuselibX11rpmhpe helion openstack 81.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmopenstack cloud 81.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmopenstack cloud 91.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmopenstack cloud crowbar 81.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmopenstack cloud crowbar 91.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise server for sap applications 12 sp31.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise server for sap applications 12 sp41.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise software development kit 12 sp51.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise server 12 sp2-bcl1.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise server 12 sp3-ltss1.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise server 12 sp3-bcl1.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise server 12 sp4-ltss1.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise server 12 sp51.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
SuselibX11rpmlinux enterprise server for sap applications 12 sp51.6.2-12.21.1Not reportedSUSE-SU-2021:1892-1Not reported
Susexorg-x11-libX11rpmlinux enterprise point of sale 11 sp37.4-5.11.72.27.1Not reportedSUSE-SU-2021:14748-1Not reported
Susexorg-x11-libX11rpmlinux enterprise server 11 sp4-ltss7.4-5.11.72.27.1Not reportedSUSE-SU-2021:14748-1Not reported
SuselibX11rpmlinux enterprise module for basesystem 15 sp21.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise module for basesystem 15 sp31.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise high performance computing 15-espos1.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise high performance computing 15-ltss1.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise high performance computing 15 sp1-espos1.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise high performance computing 15 sp1-ltss1.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise server 15-ltss1.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise server 15 sp1-bcl1.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise server 15 sp1-ltss1.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise server for sap applications 151.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise server for sap applications 15 sp11.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmmanager proxy 4.01.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmmanager retail branch server 4.01.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmmanager server 4.01.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise micro 5.01.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmenterprise storage 61.6.5-3.21.1Not reportedSUSE-SU-2021:1897-1Not reported
SuselibX11rpmlinux enterprise software development kit 12 sp51.6.2-12.18.1Not reportedSUSE-SU-2021:1766-1Not reported
SuselibX11rpmlinux enterprise server 12 sp51.6.2-12.18.1Not reportedSUSE-SU-2021:1766-1Not reported
SuselibX11rpmlinux enterprise server for sap applications 12 sp51.6.2-12.18.1Not reportedSUSE-SU-2021:1766-1Not reported
SuselibX11rpmlinux enterprise module for basesystem 15 sp21.6.5-3.18.1Not reportedSUSE-SU-2021:1765-1Not reported
SuselibX11rpmlinux enterprise module for basesystem 15 sp31.6.5-3.18.1Not reportedSUSE-SU-2021:1765-1Not reported
SuselibX11rpmlinux enterprise micro 5.01.6.5-3.18.1Not reportedSUSE-SU-2021:1765-1Not reported

[Debian bug #988737]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libx11-6]Fixed

    Source package: [libx11]

    Details (4)
    • 2:1.8.4-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

  • Source package: [libx11]

    Details (4)
    • 2:1.8.4-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

  • [libx11-dev]Fixed

    Source package: [libx11]

    Details (4)
    • 2:1.8.4-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

  • [libx11-doc]Fixed

    Source package: [libx11]

    Details (4)
    • 2:1.8.4-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

  • Source package: [libx11]

    Details (4)
    • 2:1.8.4-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

  • Source package: [libx11]

    Details (4)
    • 2:1.8.4-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

    • 2:1.8.4-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · bookworm; dsa · libx11 · debian · 12

[Debian 13 (Trixie)]

  • [libx11-6]Fixed

    Source package: [libx11]

    Details (2)
    • 2:1.8.12-1 · amd64 · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

    • 2:1.8.12-1 · arm64 · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

  • Source package: [libx11]

    Details (2)
    • 2:1.8.12-1 · all · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

    • 2:1.8.12-1 · all · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

  • [libx11-dev]Fixed

    Source package: [libx11]

    Details (2)
    • 2:1.8.12-1 · amd64 · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

    • 2:1.8.12-1 · arm64 · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

  • [libx11-doc]Fixed

    Source package: [libx11]

    Details (2)
    • 2:1.8.12-1 · all · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

    • 2:1.8.12-1 · all · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

  • Source package: [libx11]

    Details (2)
    • 2:1.8.12-1 · amd64 · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

    • 2:1.8.12-1 · arm64 · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

  • Source package: [libx11]

    Details (2)
    • 2:1.8.12-1 · amd64 · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

    • 2:1.8.12-1 · arm64 · trixie

      Fixed · Fixed: 2:1.7.1-1

      dsa · libx11 · debian · 13

Observed:

References