CVE-2023-43785: 
NixOS vulnerability analysis and mitigation

CVE-2023-43785 is a vulnerability discovered in libX11, specifically within the _XkbReadKeySyms() function. The vulnerability was disclosed on October 10, 2023, affecting libX11 versions up to (excluding) 1.8.7. This security flaw impacts various systems and distributions including Red Hat Enterprise Linux, Fedora, and NetApp products (NVD, NetApp Advisory).

The vulnerability stems from a boundary condition within the _XkbReadKeySyms() function in libX11. It has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified as CWE-125 (Out-of-bounds Read) by NIST and CWE-787 (Out-of-bounds Write) by Red Hat (NVD, Red Hat).

When successfully exploited, this vulnerability allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system. This could potentially lead to the disclosure of sensitive information stored in the system's memory (NVD, NetApp Advisory).

The vulnerability has been fixed in libX11 version 1.8.7. Various vendors have released security updates to address this vulnerability. Red Hat has addressed this issue through security advisories RHSA-2024:2145 for RHEL 9 and RHSA-2024:2973 for RHEL 8 (Red Hat Advisory, Red Hat Advisory).