CVE-2015-0255

2015-02-1100:00:00

ubuntu.com

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.079 Low

EPSS

Percentile

94.2%

JSON

X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before
1.17.1 allows remote attackers to obtain sensitive information from process
memory or cause a denial of service (crash) via a crafted string length
value in a XkbSetGeometry request.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchvnc4< anyUNKNOWN
ubuntu14.04noarchvnc4< 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchvnc4< 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1UNKNOWN
ubuntu17.10noarchxorg-server< 2:1.16.2.901-1ubuntu4UNKNOWN
ubuntu18.04noarchxorg-server< 2:1.16.2.901-1ubuntu4UNKNOWN
ubuntu18.10noarchxorg-server< 2:1.16.2.901-1ubuntu4UNKNOWN
ubuntu19.04noarchxorg-server< 2:1.16.2.901-1ubuntu4UNKNOWN
ubuntu19.10noarchxorg-server< 2:1.16.2.901-1ubuntu4UNKNOWN
ubuntu20.04noarchxorg-server< 2:1.16.2.901-1ubuntu4UNKNOWN
ubuntu20.10noarchxorg-server< 2:1.16.2.901-1ubuntu4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	vnc4	< any	UNKNOWN
ubuntu	14.04	noarch	vnc4	< 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	vnc4	< 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1	UNKNOWN
ubuntu	17.10	noarch	xorg-server	< 2:1.16.2.901-1ubuntu4	UNKNOWN
ubuntu	18.04	noarch	xorg-server	< 2:1.16.2.901-1ubuntu4	UNKNOWN
ubuntu	18.10	noarch	xorg-server	< 2:1.16.2.901-1ubuntu4	UNKNOWN
ubuntu	19.04	noarch	xorg-server	< 2:1.16.2.901-1ubuntu4	UNKNOWN
ubuntu	19.10	noarch	xorg-server	< 2:1.16.2.901-1ubuntu4	UNKNOWN
ubuntu	20.04	noarch	xorg-server	< 2:1.16.2.901-1ubuntu4	UNKNOWN
ubuntu	20.10	noarch	xorg-server	< 2:1.16.2.901-1ubuntu4	UNKNOWN