Red Hat Security Advisory

RHSA-2014:1983

xorg-x11-server security update

Released 2014-12-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) xorg-x11-server-1.15.0-7.el7_0.3, xorg-x11-server-Xephyr-1.15.0-7.el7_0.3, xorg-x11-server-Xorg-1.15.0-7.el7_0.3 +1
Red Hat Enterprise Linux Client Optional (v. 7) xorg-x11-server-Xdmx-1.15.0-7.el7_0.3, xorg-x11-server-Xnest-1.15.0-7.el7_0.3, xorg-x11-server-Xvfb-1.15.0-7.el7_0.3 +2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) xorg-x11-server-1.15.0-7.el7_0.3, xorg-x11-server-Xdmx-1.15.0-7.el7_0.3, xorg-x11-server-Xephyr-1.15.0-7.el7_0.3 +6
Red Hat Enterprise Linux Desktop (v. 6) xorg-x11-server-1.15.0-25.el6_6, xorg-x11-server-Xephyr-1.15.0-25.el6_6, xorg-x11-server-Xorg-1.15.0-25.el6_6 +1
Red Hat Enterprise Linux Desktop Optional (v. 6) xorg-x11-server-Xdmx-1.15.0-25.el6_6, xorg-x11-server-Xnest-1.15.0-25.el6_6, xorg-x11-server-Xvfb-1.15.0-25.el6_6 +2
Red Hat Enterprise Linux HPC Node Optional (v. 6) xorg-x11-server-1.15.0-25.el6_6, xorg-x11-server-Xdmx-1.15.0-25.el6_6, xorg-x11-server-Xephyr-1.15.0-25.el6_6 +6
Red Hat Enterprise Linux Server (v. 6) xorg-x11-server-1.15.0-25.el6_6, xorg-x11-server-Xephyr-1.15.0-25.el6_6, xorg-x11-server-Xorg-1.15.0-25.el6_6 +1
Red Hat Enterprise Linux Server (v. 7) xorg-x11-server-1.15.0-7.el7_0.3, xorg-x11-server-Xephyr-1.15.0-7.el7_0.3, xorg-x11-server-Xorg-1.15.0-7.el7_0.3 +1
Red Hat Enterprise Linux Server Optional (v. 6) xorg-x11-server-Xdmx-1.15.0-25.el6_6, xorg-x11-server-Xnest-1.15.0-25.el6_6, xorg-x11-server-Xvfb-1.15.0-25.el6_6 +3
Red Hat Enterprise Linux Server Optional (v. 7) xorg-x11-server-Xdmx-1.15.0-7.el7_0.3, xorg-x11-server-Xnest-1.15.0-7.el7_0.3, xorg-x11-server-Xvfb-1.15.0-7.el7_0.3 +3
Red Hat Enterprise Linux Workstation (v. 6) xorg-x11-server-1.15.0-25.el6_6, xorg-x11-server-Xephyr-1.15.0-25.el6_6, xorg-x11-server-Xorg-1.15.0-25.el6_6 +1
Red Hat Enterprise Linux Workstation (v. 7) xorg-x11-server-1.15.0-7.el7_0.3, xorg-x11-server-Xephyr-1.15.0-7.el7_0.3, xorg-x11-server-Xorg-1.15.0-7.el7_0.3 +1
Red Hat Enterprise Linux Workstation Optional (v. 6) xorg-x11-server-Xdmx-1.15.0-25.el6_6, xorg-x11-server-Xnest-1.15.0-25.el6_6, xorg-x11-server-Xvfb-1.15.0-25.el6_6 +2
Red Hat Enterprise Linux Workstation Optional (v. 7) xorg-x11-server-Xdmx-1.15.0-7.el7_0.3, xorg-x11-server-Xnest-1.15.0-7.el7_0.3, xorg-x11-server-Xvfb-1.15.0-7.el7_0.3 +2

Fixes 13 records

TI-2014-06715 CVE-2014-8098 · GHSA-j77w-hrg4-49j3

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org…

LOW 37

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds r…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.05192 Published 2014-12-10 Fixed CWE-119

TI-2014-06719 CVE-2014-8102 · GHSA-wh73-mg4h-9v79

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window…

LOW 36

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cau…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04378 Published 2014-12-10 Fixed CWE-119

TI-2014-06718 CVE-2014-8101 · GHSA-5vpf-mx7j-6j95

The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and…

LOW 36

The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-boun…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04373 Published 2014-12-10 Fixed CWE-119

TI-2014-06717 CVE-2014-8100 · GHSA-829w-46r8-7v9x

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and…

LOW 36

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bou…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04373 Published 2014-12-10 Fixed CWE-119

TI-2014-06716 CVE-2014-8099 · GHSA-5grc-mxpq-pvhg

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and…

LOW 36

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bou…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04316 Published 2014-12-10 Fixed CWE-119

TI-2014-06714 CVE-2014-8097 · GHSA-5v63-4r2j-93hp

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka…

LOW 36

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write)…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04373 Published 2014-12-10 Fixed CWE-119

TI-2014-06713 CVE-2014-8096 · GHSA-cvh9-37c6-rr6p

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka…

LOW 36

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04618 Published 2014-12-10 Fixed CWE-119

TI-2014-06712 CVE-2014-8095 · GHSA-pr28-cmcw-r6w2

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka…

LOW 36

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write)…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04431 Published 2014-12-10 Fixed CWE-119

TI-2014-06711 CVE-2014-8094 · GHSA-qmxm-339w-x3r6

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server…

LOW 36

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (c…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04299 Published 2014-12-10 Fixed CWE-190

TI-2014-06710 CVE-2014-8093 · GHSA-jv75-r474-7vqf

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System…

LOW 36

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denia…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04373 Published 2014-12-10 Fixed

TI-2014-06709 CVE-2014-8092 · GHSA-5xcf-4m43-c4p9

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server…

LOW 36

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly exec…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04373 Published 2014-12-10 Fixed

TI-2014-06720 CVE-2014-8103 · GHSA-cjgj-pfcg-8ccj

X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows…

LOW 35

X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03379 Published 2014-12-10 Fixed CWE-119

TI-2014-06708 CVE-2014-8091 · GHSA-3443-38jq-4qwq

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and…

LOW 27

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, wh…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04189 Published 2014-12-10 Fixed