CVE-2023-43786 Proof-of-Concept

Overview

This is a DoS Proof-of-Concept of libX11 Denial of Service vulnerability CVE-2023-43786.
It will trigger the integer overflow and cause an infinite loop.
The vulnerable versions are: libX11 1.8.6 and below and libXpm 3.5.16.
For a comprehensive understanding, check out the accompanying blog post for in-depth details.

Dependencies

• A vulnerable version of both libXpm and libX11
• xpmutils installed

Usage

1. Make sure you have xpmutils installed:

sudo apt-get install xpmutils

2. Run the PoC:

sxpm cve-2023-43786.xpm