Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2436-1
HistoryDec 09, 2014 - 12:00 a.m.

X.Org X server vulnerabilities

2014-12-0900:00:00
ubuntu.com
31

6.8 Medium

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

93.6%

JSON

Releases

  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • xorg-server - X.Org X11 server
  • xorg-server-lts-trusty - X.Org X11 server

Details

Ilja van Sprundel discovered a multitude of security issues in the X.Org X
server. An attacker able to connect to an X server, either locally or
remotely, could use these issues to cause the X server to crash or execute
arbitrary code resulting in possible privilege escalation.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchxserver-xorg-core< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxdmx< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxdmx-tools< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxnest< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxserver-xephyr< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxserver-xorg-core-dbg< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxserver-xorg-core-udeb< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxserver-xorg-dev< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxserver-xorg-xmir< 2:1.16.0-1ubuntu1.1UNKNOWN
Ubuntu14.10noarchxvfb< 2:1.16.0-1ubuntu1.1UNKNOWN
Rows per page:
1-10 of 341

Related

nessus 27
openvas 21
osv 1
freebsd 2
redhat 2
securityvulns 4
amazon 1
ibm 1
centos 2
slackware 1
archlinux 4
oraclelinux 2
suse 1
debian 3
mageia 3
gentoo 1
fedora 3
ubuntu 1
veracode 13
prion 13
ubuntucve 14
cve 13
debiancve 13
kaspersky 1
oracle 1
nessus
nessus
Slackware 14.1 / current : xorg-server (SSA:2014-356-03)
2014-12-23 00:00:00
Scientific Linux Security Update : xorg-x11-server on SL6.x, SL7.x i386/x86_64 (20141211)
2014-12-15 00:00:00
CentOS 6 / 7 : xorg-x11-server (CESA-2014:1983)
2014-12-15 00:00:00
openvas
openvas
Debian Security Advisory DSA 3095-1 (xorg-server - security update)
2014-12-10 00:00:00
Oracle: Security Advisory (ELSA-2014-1983)
2015-10-06 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-470)
2015-09-08 00:00:00
osv
osv
xorg-server - security update
2014-12-10 00:00:00
freebsd
freebsd
xserver -- multiple issue with X client request handling
2014-12-09 00:00:00
NVIDIA UNIX driver -- remote denial of service or arbitrary code execution
2014-12-03 00:00:00
redhat
redhat
(RHSA-2014:1983) Important: xorg-x11-server security update
2014-12-11 00:00:00
(RHSA-2014:1982) Important: xorg-x11-server security update
2014-12-11 00:00:00
securityvulns
securityvulns
[USN-2436-1] X.Org X server vulnerabilities
2014-12-11 00:00:00
X.Org X server and video drivers multiple security vulnerabilities
2014-12-11 00:00:00
[USN-2438-1] NVIDIA graphics drivers vulnerabilities
2014-12-11 00:00:00
amazon
amazon
Important: xorg-x11-server
2015-01-15 14:49:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in xorg-x11-server affect IBM Flex System Manager (FSM)
2019-01-31 02:10:01
centos
centos
xorg security update
2014-12-11 19:58:14
xorg security update
2014-12-11 20:11:55
slackware
slackware
[slackware-security] xorg-server
2014-12-23 05:39:09
archlinux
archlinux
xorg-server: multiple issues
2014-12-12 00:00:00
nvidia-304xx: arbitrary code execution
2014-12-12 00:00:00
nvidia-340xx: arbitrary code execution
2014-12-12 00:00:00
oraclelinux
oraclelinux
xorg-x11-server security update
2014-12-11 00:00:00
xorg-x11-server security update
2014-12-11 00:00:00
suse
suse
Security update for xorg-x11-server (important)
2015-01-14 23:04:43
debian
debian
[SECURITY] [DSA 3095-1] xorg-server security update
2014-12-10 18:32:55
[SECURITY] [DLA 120-1] xorg-server security update
2014-12-22 10:23:16
[SECURITY] [DLA 120-2] xorg-server regression update
2015-05-04 04:06:46
mageia
mageia
Updated x11-server packages fix security vulnerabilities
2014-12-19 18:06:35
Updated nvidia packages fix security vulnerabilities
2015-01-07 18:14:58
Updated x11-server packages fix CVE-2015-3418
2015-05-06 18:16:01
gentoo
gentoo
X.Org X Server: Multiple vulnerabilities
2015-04-17 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: nx-libs-3.5.0.29-1.fc21
2015-03-26 21:51:39
[SECURITY] Fedora 22 Update: nx-libs-3.5.0.29-1.fc22
2015-03-21 04:53:26
[SECURITY] Fedora 20 Update: nx-libs-3.5.0.29-1.fc20
2015-03-26 21:29:40
ubuntu
ubuntu
NVIDIA graphics drivers vulnerabilities
2014-12-10 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:05:57
Denial Of Service (DoS)
2019-01-15 09:03:27
Arbitrary Code Execution
2019-05-02 05:05:57
prion
prion
Out-of-bounds
2014-12-10 15:59:00
Null pointer dereference
2014-12-10 15:59:00
Out-of-bounds
2014-12-10 15:59:00
ubuntucve
ubuntucve
CVE-2014-8093
2014-12-09 00:00:00
CVE-2014-8095
2014-12-09 00:00:00
CVE-2014-8094
2014-12-09 00:00:00
cve
cve
CVE-2014-8092
2014-12-10 15:59:00
CVE-2014-8094
2014-12-10 15:59:00
CVE-2014-8097
2014-12-10 15:59:00
debiancve
debiancve
CVE-2014-8095
2014-12-10 15:59:00
CVE-2014-8093
2014-12-10 15:59:00
CVE-2014-8098
2014-12-10 15:59:00
kaspersky
kaspersky
KLA10630 Multiple vulnerabilities in Oracle VM VirtualBox
2015-07-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00

6.8 Medium

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

93.6%

JSON
Related for USN-2436-1
nessus27openvas21osv1freebsd2redhat2securityvulns4amazon1ibm1centos2slackware1archlinux4oraclelinux2suse1debian3mageia3gentoo1fedora3ubuntu1veracode13prion13ubuntucve14cve13debiancve13kaspersky1oracle1