Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2006-4447: X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return

40
This month
HIGH 7.2WATCHLISTDOWNGRADEDOWNGRADEDOWNGRADE

CVE-2006-4447 is a high-severity flaw (CVSS 7.2) affecting emu-linux-x87-xlibs, x11r6, x11r7. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

Why this priority

  • High severity
  • On your watchlist

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score7.2 (High)
EPSS exploit chance0.4% (top 61%)
CISA exploited listNo
Published2006-08-30
Last modified2026-06-16
Publisher (CNA): MITRE · Vendor: x.org

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

x.org emu-linux-x87-xlibs DOWNGRADE
Affected: 7.0_r1
Fixed in: no fixed release known
Safe to downgrade to: a release before 7.0_r1
1. Check installed version
apt-cache policy emu-linux-x87-xlibs || rpm -q emu-linux-x87-xlibs || emu-linux-x87-xlibs --version
2. No fixed release: DOWNGRADE to a release before 7.0_r1 (Debian / Ubuntu)
apt-cache madison emu-linux-x87-xlibs sudo apt install emu-linux-x87-xlibs=<VERSION_BEFORE_7.0_r1> sudo apt-mark hold emu-linux-x87-xlibs
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list emu-linux-x87-xlibs sudo dnf downgrade emu-linux-x87-xlibs-<VERSION_BEFORE_7.0_r1> sudo dnf versionlock add emu-linux-x87-xlibs
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
x.org x11r6 DOWNGRADE
Affected: 6.7.0 · 6.8 · 6.8.1 · 6.8.2
Fixed in: no fixed release known
Safe to downgrade to: a release before 6.7.0
1. Check installed version
apt-cache policy x11r6 || rpm -q x11r6 || x11r6 --version
2. No fixed release: DOWNGRADE to a release before 6.7.0 (Debian / Ubuntu)
apt-cache madison x11r6 sudo apt install x11r6=<VERSION_BEFORE_6.7.0> sudo apt-mark hold x11r6
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list x11r6 sudo dnf downgrade x11r6-<VERSION_BEFORE_6.7.0> sudo dnf versionlock add x11r6
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
x.org x11r7 DOWNGRADE
Affected: 1.0 · 1.0.1 · 1.0.2
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
apt-cache policy x11r7 || rpm -q x11r7 || x11r7 --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
apt-cache madison x11r7 sudo apt install x11r7=<VERSION_BEFORE_1.0> sudo apt-mark hold x11r7
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list x11r7 sudo dnf downgrade x11r7-<VERSION_BEFORE_1.0> sudo dnf versionlock add x11r7
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
x.org xdm DOWNGRADE
Affected: 1.0.3
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0.3
1. Check installed version
apt-cache policy xdm || rpm -q xdm || xdm --version
2. No fixed release: DOWNGRADE to a release before 1.0.3 (Debian / Ubuntu)
apt-cache madison xdm sudo apt install xdm=<VERSION_BEFORE_1.0.3> sudo apt-mark hold xdm
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list xdm sudo dnf downgrade xdm-<VERSION_BEFORE_1.0.3> sudo dnf versionlock add xdm
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
x.org xf86dga DOWNGRADE
Affected: 1.0.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0.0
1. Check installed version
apt-cache policy xf86dga || rpm -q xf86dga || xf86dga --version
2. No fixed release: DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)
apt-cache madison xf86dga sudo apt install xf86dga=<VERSION_BEFORE_1.0.0> sudo apt-mark hold xf86dga
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list xf86dga sudo dnf downgrade xf86dga-<VERSION_BEFORE_1.0.0> sudo dnf versionlock add xf86dga
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
x.org xinit DOWNGRADE
Affected: 1.0.2_r5
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0.2_r5
1. Check installed version
apt-cache policy xinit || rpm -q xinit || xinit --version
2. No fixed release: DOWNGRADE to a release before 1.0.2_r5 (Debian / Ubuntu)
apt-cache madison xinit sudo apt install xinit=<VERSION_BEFORE_1.0.2_r5> sudo apt-mark hold xinit
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list xinit sudo dnf downgrade xinit-<VERSION_BEFORE_1.0.2_r5> sudo dnf versionlock add xinit
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2006-4447?

emu-linux-x87-xlibs: downgrade or apply the listed mitigation; x11r6: downgrade or apply the listed mitigation; x11r7: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2006-4447 being exploited?

CVE-2006-4447 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2006-4447 affect?

CVE-2006-4447 affects emu-linux-x87-xlibs, x11r6, x11r7. Severity is high (CVSS 7.2). X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causin

How urgent is CVE-2006-4447?

Priority 40/100. High severity; On your watchlist

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.