Veracode Vulnerability DatabaseVERACODE:24847Denial Of Service (DoS)
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
X.Org is vulnerable to denial of service (DoS).Multiple input sanitization flaws were found in the X.Org GLX (OpenGL extension to the X Window System) extension. A malicious, authorized client could use these flaws to crash the X.Org server or, potentially, execute arbitrary code with root privileges.
References
cgit.freedesktop.org/xorg/xserver/commit?id=3f0d3f4d97bce75c1828635c322b6560a45a037f
cgit.freedesktop.org/xorg/xserver/commit?id=6c69235a9dfc52e4b4e47630ff4bab1a820eb543
cgit.freedesktop.org/xorg/xserver/commit?id=ec9c97c6bf70b523bc500bd3adf62176f1bb33a4
rhn.redhat.com/errata/RHSA-2011-1359.html
rhn.redhat.com/errata/RHSA-2011-1360.html
www.openwall.com/lists/oss-security/2011/09/22/7
www.openwall.com/lists/oss-security/2011/09/23/4
www.openwall.com/lists/oss-security/2011/09/23/6
access.redhat.com/errata/RHSA-2011:1359
access.redhat.com/security/updates/classification/#moderate
bugs.freedesktop.org/show_bug.cgi?id=28823
bugzilla.redhat.com/show_bug.cgi?id=740954
Related
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C