← Back

CVE-2014-8094

nvd nist
Published: Dec 10, 2014Modified: May 6, 2026

JSON object

Loading...
6.5
Vector
AV:N/AC:L/Au:S/C:P/I:P/A:P
Exploitability: 8.0 / Impact: 6.4
Source: NVD

Description

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write.

Affected (160)

1 product
X Server
1 product
Solaris
1 product
Debian Linux
Configuration A
157 vulnerable
Vulnerable SoftwareAffected Versions
X.org
Version 1.10.0.901
Version 1.10.0.902
Version 1.10.0
Version 1.10.1.901
Version 1.10.1.902
Version 1.10.1
Version 1.10.2.901
Version 1.10.2.902
Version 1.10.2
Version 1.10.3.901
Version 1.10.3.902
Version 1.10.3
Version 1.10.4
Version 1.10.6
Version 1.10.99.901
Version 1.10.99.902
Version 1.11.0
Version 1.11.1.901
Version 1.11.1.902
Version 1.11.1
Version 1.11.2.901
Version 1.11.2.902
Version 1.11.2
Version 1.11.3.901
Version 1.11.3.902
Version 1.11.3
Version 1.11.4
Version 1.11.99.1
Version 1.11.99.2
Version 1.11.99.901
Version 1.11.99.902
Version 1.11.99.903
Version 1.12.0.901
Version 1.12.0.902
Version 1.12.0
Version 1.12.1.901
Version 1.12.1.902
Version 1.12.2.901
Version 1.12.2.902
Version 1.12.2
Version 1.12.3.901
Version 1.12.3.902
Version 1.12.3
Version 1.12.4
Version 1.12.99.901
Version 1.12.99.902
Version 1.12.99.903
Version 1.12.99.904
Version 1.12.99.905
Version 1.13.0.901
Version 1.13.0.902
Version 1.13.0
Version 1.13.1.901
Version 1.13.1
Version 1.13.2.901
Version 1.13.2.902
Version 1.13.2
Version 1.13.3
Version 1.13.4
Version 1.13.99.901
Version 1.13.99.902
Version 1.14.0
Version 1.14.1.901
Version 1.14.1.902
Version 1.14.1
Version 1.14.2.901
Version 1.14.2.902
Version 1.14.2
Version 1.14.2 rc1
Version 1.14.3.901
Version 1.14.3.901 rc1
Version 1.14.3
Version 1.14.4.901
Version 1.14.4
Version 1.14.5.901
Version 1.14.5
Version 1.14.6
Version 1.14.7
Version 1.14.99.1
Version 1.14.99.2
Version 1.14.99.3
Version 1.14.99.901
Version 1.14.99.902
Version 1.14.99.903
Version 1.14.99.904
Version 1.14.99.905
Version 1.15.0.901
Version 1.15.0
Version 1.15.1
Version 1.15.2
Version 1.15.99.901
Version 1.15.99.902
Version 1.15.99.903
Version 1.15.99.904
Version 1.16.0.901
Version 1.16.0
Version 1.16.1.901
Version 1.16.1
Version 1.16.2.901
Version 1.16.2.99.901
Version 1.16.2
Version 1.7.0.901
Version 1.7.0.902
Version 1.7.0
Version 1.7.1.901
Version 1.7.1.902
Version 1.7.1
Version 1.7.2.901
Version 1.7.2.902
Version 1.7.2
Version 1.7.3.901
Version 1.7.3.902
Version 1.7.3
Version 1.7.4.901
Version 1.7.4.902
Version 1.7.4
Version 1.7.5.901
Version 1.7.5.902
Version 1.7.5
Version 1.7.6.901
Version 1.7.6.902
Version 1.7.6
Version 1.7.7
Version 1.7.99.1
Version 1.7.99.2
Version 1.7.99.901
Version 1.7.99.902
Version 1.8.0.901
Version 1.8.0.902
Version 1.8.0
Version 1.8.1.901
Version 1.8.1.902
Version 1.8.1
Version 1.8.2.901
Version 1.8.2.902
Version 1.8.2
Version 1.8.99.901
Version 1.8.99.902
Version 1.8.99.903
Version 1.8.99.904
Version 1.8.99.905
Version 1.9.0.901
Version 1.9.0.902
Version 1.9.0
Version 1.9.1
Version 1.9.2.901
Version 1.9.2.902
Version 1.9.2
Version 1.9.3.901
Version 1.9.3.902
Version 1.9.3
Version 1.9.4.901
Version 1.9.4
Version 1.9.5
Version 1.9.99.901
Version 1.9.99.902
Version 1.9.99.903
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 10
Version 11.2
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 7.0

References (18)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Permissions Required
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.