CVEvulnerability
CVE-2015-3164
3.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-07-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
Affected configurations
• opensuse opensuse 13.2
• x.org x server 1.16.0
• x.org x server 1.16.1
• x.org x server 1.16.1.901
• x.org x server 1.16.2
• x.org x server 1.16.2.901
• x.org x server 1.16.3
• x.org x server 1.17.0
• x.org xorg-server 1.16.4
• x.org xorg-server 1.16.99.901
• x.org xorg-server 1.16.99.902
• x.org xorg-server 1.17.1
Related
Weakness · not in database (1)
References
- http://lists.freedesktop.org/archives/wayland-devel/2015-June/022548.html Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00044.html lists.opensuse.org
- http://www.securityfocus.com/bid/75535 www.securityfocus.com
- https://security.gentoo.org/glsa/201701-64 security.gentoo.org
- http://lists.freedesktop.org/archives/wayland-devel/2015-June/022548.html Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00044.html lists.opensuse.org
- http://www.securityfocus.com/bid/75535 www.securityfocus.com
- https://security.gentoo.org/glsa/201701-64 security.gentoo.org