CVEvulnerability
CVE-2014-8094
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-190
Description
Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write.
Affected configurations
• x.org x server 1.7.0
• x.org x server 1.7.0.901
• x.org x server 1.7.0.902
• x.org x server 1.7.1
• x.org x server 1.7.1.901
• x.org x server 1.7.1.902
• x.org x server 1.7.2
• x.org x server 1.7.2.901
• x.org x server 1.7.2.902
• x.org x server 1.7.3
• x.org x server 1.7.3.901
• x.org x server 1.7.3.902
• x.org x server 1.7.4
• x.org x server 1.7.4.901
• x.org x server 1.7.4.902
• x.org x server 1.7.5
• x.org x server 1.7.5.901
• x.org x server 1.7.5.902
• x.org x server 1.7.6
• x.org x server 1.7.6.901
• x.org x server 1.7.6.902
• x.org x server 1.7.7
• x.org x server 1.7.99.1
• x.org x server 1.7.99.2
• x.org x server 1.7.99.901
• x.org x server 1.7.99.902
• x.org x server 1.8.0
• x.org x server 1.8.0.901
• x.org x server 1.8.0.902
• x.org x server 1.8.1
• x.org x server 1.8.1.901
• x.org x server 1.8.1.902
• x.org x server 1.8.2
• x.org x server 1.8.2.901
• x.org x server 1.8.2.902
• x.org x server 1.8.99.901
• x.org x server 1.8.99.902
• x.org x server 1.8.99.903
• x.org x server 1.8.99.904
• x.org x server 1.8.99.905
• x.org x server 1.9.0
• x.org x server 1.9.0.901
• x.org x server 1.9.0.902
• x.org x server 1.9.1
• x.org x server 1.9.2
• x.org x server 1.9.2.901
• x.org x server 1.9.2.902
• x.org x server 1.9.3
• x.org x server 1.9.3.901
• x.org x server 1.9.3.902
• x.org x server 1.9.4
• x.org x server 1.9.4.901
• x.org x server 1.9.5
• x.org x server 1.9.99.901
• x.org x server 1.9.99.902
• x.org x server 1.9.99.903
• x.org x server 1.10.0
• x.org x server 1.10.0.901
• x.org x server 1.10.0.902
• x.org x server 1.10.1
… and 98 more
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://advisories.mageia.org/MGASA-2014-0532.html Third Party Advisory
- http://secunia.com/advisories/61947 secunia.com
- http://secunia.com/advisories/62292 Permissions Required
- http://www.debian.org/security/2014/dsa-3095 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 Broken Link
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html Third Party Advisory
- http://www.securityfocus.com/bid/71601 www.securityfocus.com
- http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201504-06 security.gentoo.org
- http://advisories.mageia.org/MGASA-2014-0532.html Third Party Advisory
- http://secunia.com/advisories/61947 secunia.com
- http://secunia.com/advisories/62292 Permissions Required
- http://www.debian.org/security/2014/dsa-3095 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 Broken Link
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html Third Party Advisory
- http://www.securityfocus.com/bid/71601 www.securityfocus.com
- http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201504-06 security.gentoo.org