Debian/x11-xserver-utils: unknown
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
Action: Upgrade x11-xserver-utils to 7.6+2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.6+2 | - |
Fixed versions
| 7.6+2 |
Sources
published · modified · JSON