PT-2011-1117 · Xorg+2 · Xorg-X11-Server-Xvfb+9
Vincent Danen
·
Publicado
2011-10-06
·
Atualizado
2012-09-06
·
CVE-2010-4818
CVSS v2.0
8.5
Alta
| Vetor | AV:N/AC:M/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
xorg-x11-server-Xorg version 1.7.7
xorg-x11-server-Xephyr version 1.7.7
xorg-x11-server-Xnest version 1.7.7
xorg-x11-server-Xdmx version 1.7.7
xorg-x11-server-devel version 1.7.7
xorg-x11-server-common version 1.7.7
xorg-x11-server-debuginfo version 1.7.7
xorg-x11-server-Xvfb version 1.7.7
Description
The issue affects multiple packages of the xorg-x11-server, allowing remote authenticated users to cause a denial of service or possibly execute arbitrary code. This can be achieved through crafted requests to specific functions, such as those in glx/glxcmdsswap.c or glx/glxcmds.c, or by exploiting vulnerabilities in the screen field of a request. The exploitation can lead to a violation of confidentiality, integrity, and availability of protected information.
Recommendations
For xorg-x11-server-Xorg version 1.7.7, consider disabling the vulnerable functions until a patch is available.
For xorg-x11-server-Xephyr version 1.7.7, restrict access to the vulnerable modules to minimize the risk of exploitation.
For xorg-x11-server-Xnest version 1.7.7, avoid using the vulnerable parameters in the affected API endpoints until the issue is resolved.
For xorg-x11-server-Xdmx version 1.7.7, apply configuration changes to limit the impact of the vulnerability.
For xorg-x11-server-devel version 1.7.7, xorg-x11-server-common version 1.7.7, xorg-x11-server-debuginfo version 1.7.7, and xorg-x11-server-Xvfb version 1.7.7, update to a newer version that contains a fix for this issue, if available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Red Hat
Suse
Xorg-X11-Server-Xdmx
Xorg-X11-Server-Xephyr
Xorg-X11-Server-Xnest
Xorg-X11-Server-Xorg
Xorg-X11-Server-Xvfb
Xorg-X11-Server-Common
Xorg-X11-Server-Debuginfo
Xorg-X11-Server-Devel