Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2500-1
HistoryFeb 17, 2015 - 12:00 a.m.

X.Org X server vulnerabilities

2015-02-1700:00:00
ubuntu.com
33

6.3 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.079 Low

EPSS

Percentile

94.2%

JSON

Releases

  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • xorg-server - X.Org X11 server
  • xorg-server-lts-trusty - X.Org X11 server
  • xorg-server-lts-utopic - X.Org X11 server

Details

Olivier Fourdan discovered that the X.Org X server incorrectly handled
XkbSetGeometry requests resulting in an information leak. An attacker able
to connect to an X server, either locally or remotely, could use this issue
to possibly obtain sensitive information. (CVE-2015-0255)

It was discovered that the X.Org X server incorrectly handled certain
trapezoids. An attacker able to connect to an X server, either locally or
remotely, could use this issue to possibly crash the server. This issue
only affected Ubuntu 12.04 LTS. (CVE-2013-6424)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchxserver-xorg-core< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxdmx< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxdmx-tools< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxnest< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxserver-xephyr< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxserver-xorg-core-dbg< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxserver-xorg-core-udeb< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxserver-xorg-dev< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxserver-xorg-xmir< 2:1.16.0-1ubuntu1.3UNKNOWN
Ubuntu14.10noarchxvfb< 2:1.16.0-1ubuntu1.3UNKNOWN
Rows per page:
1-10 of 391

Related

openvas 38
nessus 32
prion 2
debiancve 2
securityvulns 5
cve 2
mageia 2
redhat 2
debian 3
oraclelinux 3
ubuntucve 2
amazon 2
centos 2
osv 2
freebsd 1
veracode 1
ibm 1
archlinux 1
ubuntu 1
gentoo 3
kaspersky 1
fedora 3
oracle 1
openvas
openvas
Ubuntu: Security Advisory (USN-2500-1)
2015-02-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0051-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2014-0016)
2022-01-28 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : X.Org X server vulnerabilities (USN-2500-1)
2015-02-18 00:00:00
RHEL 5 / 6 : xorg-x11-server (RHSA-2013:1868)
2013-12-23 00:00:00
Debian DSA-2822-1 : xorg-server - integer underflow
2013-12-19 00:00:00
prion
prion
Integer overflow
2014-01-18 19:55:00
Design/Logic Flaw
2015-02-13 15:59:00
debiancve
debiancve
CVE-2013-6424
2014-01-18 19:55:00
CVE-2015-0255
2015-02-13 15:59:00
securityvulns
securityvulns
X.Org integer overflow
2013-12-23 00:00:00
[SECURITY] [DSA 2822-1] xorg-server security update
2013-12-23 00:00:00
[SECURITY] [DSA 3160-1] xorg-server security update
2015-02-16 00:00:00
cve
cve
CVE-2013-6424
2014-01-18 19:55:00
CVE-2015-0255
2015-02-13 15:59:00
mageia
mageia
Updated x11-server package fixes security vulnerability
2014-01-21 20:08:14
Updated x11-server packages fix CVE-2015-0255
2015-02-17 21:38:13
redhat
redhat
(RHSA-2013:1868) Important: xorg-x11-server security update
2013-12-20 00:00:00
(RHSA-2015:0797) Moderate: xorg-x11-server security update
2015-04-10 00:00:00
debian
debian
[SECURITY] [DSA 2822-1] xorg-server security update
2013-12-18 15:26:54
[SECURITY] [DLA 218-1] xorg-server security update
2015-05-01 10:55:32
[SECURITY] [DSA 3160-1] xorg-server security update
2015-02-11 17:23:43
oraclelinux
oraclelinux
xorg-x11-server security update
2013-12-20 00:00:00
xorg-x11-server security update
2015-04-09 00:00:00
xorg-x11-server security update
2014-12-11 00:00:00
ubuntucve
ubuntucve
CVE-2013-6424
2014-01-18 00:00:00
CVE-2015-0255
2015-02-11 00:00:00
amazon
amazon
Important: xorg-x11-server
2014-01-14 16:16:00
Medium: xorg-x11-server
2015-05-05 15:55:00
centos
centos
xorg security update
2013-12-20 12:23:37
xorg security update
2015-04-10 12:06:39
osv
osv
xorg-server - security update
2015-02-11 00:00:00
vnc4 vulnerabilities
2021-03-15 20:16:26
freebsd
freebsd
xorg-server -- Information leak in the XkbSetGeometry request of X servers.
2015-02-10 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 09:05:28
ibm
ibm
Security Bulletin: TSSC/IMC is affected by vulnerability for xorg-x11-server (CVE-2015-0255)
2018-06-18 00:09:39
archlinux
archlinux
xorg-server: information leak and denial of service
2015-02-10 00:00:00
ubuntu
ubuntu
VNC4 vulnerabilities
2021-03-15 00:00:00
gentoo
gentoo
X.Org X Server: Multiple vulnerabilities
2017-01-25 00:00:00
X.Org Server: Multiple vulnerabilities
2017-10-29 00:00:00
X.Org X Server: Multiple vulnerabilities
2015-04-17 00:00:00
kaspersky
kaspersky
KLA10630 Multiple vulnerabilities in Oracle VM VirtualBox
2015-07-14 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: nx-libs-3.5.0.29-1.fc21
2015-03-26 21:51:39
[SECURITY] Fedora 22 Update: nx-libs-3.5.0.29-1.fc22
2015-03-21 04:53:26
[SECURITY] Fedora 20 Update: nx-libs-3.5.0.29-1.fc20
2015-03-26 21:29:40
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00

6.3 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.079 Low

EPSS

Percentile

94.2%

JSON
Related for USN-2500-1
openvas38nessus32prion2debiancve2securityvulns5cve2mageia2redhat2debian3oraclelinux3ubuntucve2amazon2centos2osv2freebsd1veracode1ibm1archlinux1ubuntu1gentoo3kaspersky1fedora3oracle1