PT-2015-4546 · X.Org+5 · X.Org Server+5

Olivier Fourdan

·

Publicado

2015-02-10

·

Atualizado

2025-08-29

·

CVE-2015-0255

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:P
Name of the Vulnerable Software and Affected Versions X.Org Server versions prior to 1.16.3 X.Org Server versions 1.17.x prior to 1.17.1
Description The issue allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted string length value in a XkbSetGeometry request.
Recommendations For X.Org Server versions prior to 1.16.3, update to version 1.16.3 or later. For X.Org Server versions 1.17.x prior to 1.17.1, update to version 1.17.1 or later.

Correção

DoS

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2015-1154
CESA-2015_0797
CVE-2015-0255
DLA-218-1
DSA-3160-1
MGASA-2015-0073
OPENSUSE-SU-2024:10056-1
RHSA-2015:0797
RHSA-2015_0797
SUSE-SU-2015:0398-1
SUSE-SU-2015:0399-1
SUSE-SU-2015:0400-1
SUSE-SU-2015:0401-1
SUSE-SU-2015:0402-1
SUSE-SU-2015:0403-1
SUSE-SU-2015:0427-1
SUSE-SU-2015:0939-1
SUSE-SU-2015:1025-1
SUSE-SU-2015_0398-1
SUSE-SU-2015_0399-1
SUSE-SU-2015_0400-1
SUSE-SU-2015_0401-1
SUSE-SU-2015_0402-1
SUSE-SU-2015_0403-1
SUSE-SU-2015_0427-1
SUSE-SU-2015_0939-1
USN-2500-1
USN-4772-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Ubuntu
X.Org Server