/jfrog-CVE-2023-43786-libX11_DoS

CVE-2023-43786 Proof-of-Concept

Overview

This is a DoS Proof-of-Concept of libX11 Denial of Service vulnerability CVE-2023-43786.
It will trigger the integer overflow and cause an infinite loop.
The vulnerable versions are: libX11 1.8.6 and below and libXpm 3.5.16.
For a comprehensive understanding, check out the accompanying blog post for in-depth details.

Dependencies

  • A vulnerable version of both libXpm and libX11
  • xpmutils installed

Usage

  1. Make sure you have xpmutils installed:
sudo apt-get install xpmutils
  1. Run the PoC:
sxpm cve-2023-43786.xpm