PT-2016-3612 · X.Org+2 · X.Org Server+2

Publicado

2015-02-11

·

Atualizado

2025-08-29

·

CVE-2015-3418

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions X.Org Server versions prior to 1.16.4
Description The issue allows attackers to cause a denial of service, resulting in a crash, by sending a PutImage request with a height of zero. This is due to a flaw in the ProcPutImage function in dix/dispatch.c.
Recommendations For versions prior to 1.16.4, update to version 1.16.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the ProcPutImage function to minimize the risk of exploitation.

Correção

DoS

Divide By Zero

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

ALT-PU-2015-1154
CVE-2015-3418
DLA-120-2
MGASA-2015-0196
SUSE-SU-2015:0427-1
SUSE-SU-2015:1025-1
SUSE-SU-2015:1127-1
SUSE-SU-2015_1025-1

Produtos afetados

Alt Linux
Suse
X.Org Server