CVE-2015-3164

Published: Jul 1, 2015Modified: May 6, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.

Affected (12)

Products: Opensuse: Opensuse · X.org: X Server, Xorg Server

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.2

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
X.org X Server	Version 1.16.0
X.org X Server	Version 1.16.1.901
X.org X Server	Version 1.16.1
X.org X Server	Version 1.16.2.901
X.org X Server	Version 1.16.2
X.org X Server	Version 1.16.3
X.org X Server	Version 1.17.0
X.org Xorg Server	Version 1.16.4
X.org Xorg Server	Version 1.16.99.901
X.org Xorg Server	Version 1.16.99.902
X.org Xorg Server	Version 1.17.1