CVE-2023-43786 PoC — X.Org libX11 安全漏洞

介绍

# CVE-2023-43786 Proof-of-Concept

### Overview

This is a DoS Proof-of-Concept of libX11 Denial of Service vulnerability CVE-2023-43786.  
It will trigger the integer overflow and cause an infinite loop.  
The vulnerable versions are: libX11 1.8.6 and below and libXpm 3.5.16.  
For a comprehensive understanding, check out the accompanying [blog post](https://jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-one/) for in-depth details.

### Dependencies

* A vulnerable version of both libXpm and libX11
* `xpmutils` installed

### Usage

1. Make sure you have `xpmutils` installed:
```
sudo apt-get install xpmutils
```

2. Run the PoC:
```
sxpm cve-2023-43786.xpm
```

文件快照

备注