PT-2016-3612 · X.Org+2 · X.Org Server+2

Published 2015-02-11 · Updated 2025-08-29 · CVE-2015-3418

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions X.Org Server versions prior to 1.16.4

Description The issue allows attackers to cause a denial of service, resulting in a crash, by sending a PutImage request with a height of zero. This is due to a flaw in the ProcPutImage function in dix/dispatch.c.

Recommendations For versions prior to 1.16.4, update to version 1.16.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the ProcPutImage function to minimize the risk of exploitation.

Fix

DoS

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

ALT-PU-2015-1154

CVE-2015-3418

DLA-120-2

MGASA-2015-0196

SUSE-SU-2015:0427-1

SUSE-SU-2015:1025-1

SUSE-SU-2015:1127-1

SUSE-SU-2015_1025-1

Affected Products

Alt Linux

Suse

X.Org Server

References · 60

• https://osv.dev/vulnerability/MGASA-2015-0196 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06601 · Security Note
• https://bdu.fstec.ru/vul/2015-06598 · Security Note
• https://bdu.fstec.ru/vul/2015-09279 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3418 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-3418 · Security Note
• https://bdu.fstec.ru/vul/2015-06604 · Security Note
• https://advisories.mageia.org/MGASA-2015-0196.html · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3418 · Security Note
• https://bdu.fstec.ru/vul/2015-06590 · Security Note
• https://bdu.fstec.ru/vul/2015-09276 · Security Note
• https://bdu.fstec.ru/vul/2015-09278 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0255 · Security Note
• https://bdu.fstec.ru/vul/2015-09284 · Security Note
• https://bdu.fstec.ru/vul/2015-09286 · Security Note