Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201504-06
HistoryApr 17, 2015 - 12:00 a.m.

X.Org X Server: Multiple vulnerabilities

2015-04-1700:00:00
Gentoo Foundation
security.gentoo.org
15

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.079 Low

EPSS

Percentile

94.2%

JSON

Background

The X Window System is a graphical windowing system based on a client/server model.

Description

Multiple vulnerabilities have been discovered in X.Org X Server. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All X.Org X Server users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=x11-base/xorg-server-1.12.4-r4"
OSVersionArchitecturePackageVersionFilename
Gentooanyallx11-base/xorg-server< 1.12.4-r4UNKNOWN

Related

openvas 40
nessus 41
osv 3
freebsd 3
archlinux 5
oraclelinux 3
redhat 3
securityvulns 5
amazon 2
ibm 2
centos 3
slackware 1
ubuntu 4
debian 5
mageia 4
suse 1
fedora 3
veracode 14
prion 14
ubuntucve 15
cve 14
debiancve 14
openvas
openvas
Gentoo Security Advisory GLSA 201504-06
2015-09-29 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-470)
2015-09-08 00:00:00
Debian Security Advisory DSA 3095-1 (xorg-server - security update)
2014-12-10 00:00:00
nessus
nessus
Slackware 14.1 / current : xorg-server (SSA:2014-356-03)
2014-12-23 00:00:00
openSUSE Security Update : xorg-x11-server (openSUSE-SU-2014:1719-1)
2014-12-29 00:00:00
Mandriva Linux Security Advisory : x11-server (MDVSA-2015:119)
2015-03-30 00:00:00
osv
osv
xorg-server - security update
2014-12-10 00:00:00
xorg-server - security update
2015-02-11 00:00:00
vnc4 vulnerabilities
2021-03-15 20:16:26
freebsd
freebsd
xserver -- multiple issue with X client request handling
2014-12-09 00:00:00
NVIDIA UNIX driver -- remote denial of service or arbitrary code execution
2014-12-03 00:00:00
xorg-server -- Information leak in the XkbSetGeometry request of X servers.
2015-02-10 00:00:00
archlinux
archlinux
xorg-server: multiple issues
2014-12-12 00:00:00
nvidia-304xx: arbitrary code execution
2014-12-12 00:00:00
nvidia: arbitrary code execution
2014-12-12 00:00:00
oraclelinux
oraclelinux
xorg-x11-server security update
2014-12-11 00:00:00
xorg-x11-server security update
2014-12-11 00:00:00
xorg-x11-server security update
2015-04-09 00:00:00
redhat
redhat
(RHSA-2014:1983) Important: xorg-x11-server security update
2014-12-11 00:00:00
(RHSA-2014:1982) Important: xorg-x11-server security update
2014-12-11 00:00:00
(RHSA-2015:0797) Moderate: xorg-x11-server security update
2015-04-10 00:00:00
securityvulns
securityvulns
[USN-2436-1] X.Org X server vulnerabilities
2014-12-11 00:00:00
X.Org X server and video drivers multiple security vulnerabilities
2014-12-11 00:00:00
[USN-2438-1] NVIDIA graphics drivers vulnerabilities
2014-12-11 00:00:00
amazon
amazon
Important: xorg-x11-server
2015-01-15 14:49:00
Medium: xorg-x11-server
2015-05-05 15:55:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in xorg-x11-server affect IBM Flex System Manager (FSM)
2019-01-31 02:10:01
Security Bulletin: TSSC/IMC is affected by vulnerability for xorg-x11-server (CVE-2015-0255)
2018-06-18 00:09:39
centos
centos
xorg security update
2014-12-11 19:58:14
xorg security update
2014-12-11 20:11:55
xorg security update
2015-04-10 12:06:39
slackware
slackware
[slackware-security] xorg-server
2014-12-23 05:39:09
ubuntu
ubuntu
X.Org X server vulnerabilities
2014-12-09 00:00:00
NVIDIA graphics drivers vulnerabilities
2014-12-10 00:00:00
VNC4 vulnerabilities
2021-03-15 00:00:00
debian
debian
[SECURITY] [DLA 120-1] xorg-server security update
2014-12-22 10:23:16
[SECURITY] [DSA 3095-1] xorg-server security update
2014-12-10 18:32:55
[SECURITY] [DLA 218-1] xorg-server security update
2015-05-01 10:55:08
mageia
mageia
Updated x11-server packages fix security vulnerabilities
2014-12-19 18:06:35
Updated nvidia packages fix security vulnerabilities
2015-01-07 18:14:58
Updated x11-server packages fix CVE-2015-0255
2015-02-17 21:38:13
suse
suse
Security update for xorg-x11-server (important)
2015-01-14 23:04:43
fedora
fedora
[SECURITY] Fedora 20 Update: nx-libs-3.5.0.29-1.fc20
2015-03-26 21:29:40
[SECURITY] Fedora 21 Update: nx-libs-3.5.0.29-1.fc21
2015-03-26 21:51:39
[SECURITY] Fedora 22 Update: nx-libs-3.5.0.29-1.fc22
2015-03-21 04:53:26
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:05:57
Denial Of Service (DoS)
2019-01-15 09:03:27
Arbitrary Code Execution
2019-05-02 05:05:57
prion
prion
Out-of-bounds
2014-12-10 15:59:00
Null pointer dereference
2014-12-10 15:59:00
Integer overflow
2014-12-10 15:59:00
ubuntucve
ubuntucve
CVE-2014-8094
2014-12-09 00:00:00
CVE-2014-8093
2014-12-09 00:00:00
CVE-2014-8091
2014-12-09 00:00:00
cve
cve
CVE-2014-8094
2014-12-10 15:59:00
CVE-2014-8092
2014-12-10 15:59:00
CVE-2014-8093
2014-12-10 15:59:00
debiancve
debiancve
CVE-2014-8093
2014-12-10 15:59:00
CVE-2014-8095
2014-12-10 15:59:00
CVE-2014-8103
2014-12-10 15:59:00

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.079 Low

EPSS

Percentile

94.2%

JSON
Related for GLSA-201504-06
openvas40nessus41osv3freebsd3archlinux5oraclelinux3redhat3securityvulns5amazon2ibm2centos3slackware1ubuntu4debian5mageia4suse1fedora3veracode14prion14ubuntucve15cve14debiancve14