Published: 10/12/2014 Updated: 13/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) prior to 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote malicious users to cause a denial of service (NULL pointer dereference and server crash) via a crafted connection request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
x.org xorg-server
x.org x11 5.0

Synopsis Important: xorg-x11-server security update Type/Severity Security Advisory: Important Topic Updated xorg-x11-server packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 6 and 7Red Hat Product Security has rated this update as having Important securityimpact Com ...

Synopsis Important: xorg-x11-server security update Type/Severity Security Advisory: Important Topic Updated xorg-x11-server packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 5Red Hat Product Security has rated this update as having Important securityimpact Common Vu ...

Several security issues were fixed in the XOrg X server ...

Several security issues were fixed in the NVIDIA graphics drivers ...

Ilja van Sprundel of IOActive discovered several security issues in the Xorg X server, which may lead to privilege escalation or denial of service For the stable distribution (wheezy), these problems have been fixed in version 1124-6+deb7u5 For the upcoming stable distribution (jessie), these problems will be fixed soon For the unstable distr ...

Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the XOrg server calculated memory requirements for certain X11 core protocol and GLX extension requests A malicious, authenticated client could use either of these flaws to crash the XOrg server or, potentially, execute arbitrary code with root privileges (CVE-2 ...

NVD-CWE-Other http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/http://secunia.com/advisories/62292 http://www.debian.org/security/2014/dsa-3095 http://advisories.mageia.org/MGASA-2014-0532.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html http://www.securityfocus.com/bid/71597 https://security.gentoo.org/glsa/201504-06 http://secunia.com/advisories/61947 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2014:1983 https://usn.ubuntu.com/2436-1/

CVE-2014-8091

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect