Lucene search
HistoryDec 10, 2014 - 3:59 p.m.
CVE-2014-8094
cve-2014-8094
x.org server
dri2 extension
integer overflow
denial of service
code execution
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.8%
Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write.
Affected configurations
Node
x.orgxorg-serverMatch1.7.0
ORx.orgxorg-serverMatch1.7.0.901
ORx.orgxorg-serverMatch1.7.0.902
ORx.orgxorg-serverMatch1.7.1
ORx.orgxorg-serverMatch1.7.1.901
ORx.orgxorg-serverMatch1.7.1.902
ORx.orgxorg-serverMatch1.7.2
ORx.orgxorg-serverMatch1.7.2.901
ORx.orgxorg-serverMatch1.7.2.902
ORx.orgxorg-serverMatch1.7.3
ORx.orgxorg-serverMatch1.7.3.901
ORx.orgxorg-serverMatch1.7.3.902
ORx.orgxorg-serverMatch1.7.4
ORx.orgxorg-serverMatch1.7.4.901
ORx.orgxorg-serverMatch1.7.4.902
ORx.orgxorg-serverMatch1.7.5
ORx.orgxorg-serverMatch1.7.5.901
ORx.orgxorg-serverMatch1.7.5.902
ORx.orgxorg-serverMatch1.7.6
ORx.orgxorg-serverMatch1.7.6.901
ORx.orgxorg-serverMatch1.7.6.902
ORx.orgxorg-serverMatch1.7.7
ORx.orgxorg-serverMatch1.7.99.1
ORx.orgxorg-serverMatch1.7.99.2
ORx.orgxorg-serverMatch1.7.99.901
ORx.orgxorg-serverMatch1.7.99.902
ORx.orgxorg-serverMatch1.8.0
ORx.orgxorg-serverMatch1.8.0.901
ORx.orgxorg-serverMatch1.8.0.902
ORx.orgxorg-serverMatch1.8.1
ORx.orgxorg-serverMatch1.8.1.901
ORx.orgxorg-serverMatch1.8.1.902
ORx.orgxorg-serverMatch1.8.2
ORx.orgxorg-serverMatch1.8.2.901
ORx.orgxorg-serverMatch1.8.2.902
ORx.orgxorg-serverMatch1.8.99.901
ORx.orgxorg-serverMatch1.8.99.902
ORx.orgxorg-serverMatch1.8.99.903
ORx.orgxorg-serverMatch1.8.99.904
ORx.orgxorg-serverMatch1.8.99.905
ORx.orgxorg-serverMatch1.9.0
ORx.orgxorg-serverMatch1.9.0.901
ORx.orgxorg-serverMatch1.9.0.902
ORx.orgxorg-serverMatch1.9.1
ORx.orgxorg-serverMatch1.9.2
ORx.orgxorg-serverMatch1.9.2.901
ORx.orgxorg-serverMatch1.9.2.902
ORx.orgxorg-serverMatch1.9.3
ORx.orgxorg-serverMatch1.9.3.901
ORx.orgxorg-serverMatch1.9.3.902
ORx.orgxorg-serverMatch1.9.4
ORx.orgxorg-serverMatch1.9.4.901
ORx.orgxorg-serverMatch1.9.5
ORx.orgxorg-serverMatch1.9.99.901
ORx.orgxorg-serverMatch1.9.99.902
ORx.orgxorg-serverMatch1.9.99.903
ORx.orgxorg-serverMatch1.10.0
ORx.orgxorg-serverMatch1.10.0.901
ORx.orgxorg-serverMatch1.10.0.902
ORx.orgxorg-serverMatch1.10.1
ORx.orgxorg-serverMatch1.10.1.901
ORx.orgxorg-serverMatch1.10.1.902
ORx.orgxorg-serverMatch1.10.2
ORx.orgxorg-serverMatch1.10.2.901
ORx.orgxorg-serverMatch1.10.2.902
ORx.orgxorg-serverMatch1.10.3
ORx.orgxorg-serverMatch1.10.3.901
ORx.orgxorg-serverMatch1.10.3.902
ORx.orgxorg-serverMatch1.10.4
ORx.orgxorg-serverMatch1.10.6
ORx.orgxorg-serverMatch1.10.99.901
ORx.orgxorg-serverMatch1.10.99.902
ORx.orgxorg-serverMatch1.11.0
ORx.orgxorg-serverMatch1.11.1
ORx.orgxorg-serverMatch1.11.1.901
ORx.orgxorg-serverMatch1.11.1.902
ORx.orgxorg-serverMatch1.11.2
ORx.orgxorg-serverMatch1.11.2.901
ORx.orgxorg-serverMatch1.11.2.902
ORx.orgxorg-serverMatch1.11.3
ORx.orgxorg-serverMatch1.11.3.901
ORx.orgxorg-serverMatch1.11.3.902
ORx.orgxorg-serverMatch1.11.4
ORx.orgxorg-serverMatch1.11.99.1
ORx.orgxorg-serverMatch1.11.99.2
ORx.orgxorg-serverMatch1.11.99.901
ORx.orgxorg-serverMatch1.11.99.902
ORx.orgxorg-serverMatch1.11.99.903
ORx.orgxorg-serverMatch1.12.0
ORx.orgxorg-serverMatch1.12.0.901
ORx.orgxorg-serverMatch1.12.0.902
ORx.orgxorg-serverMatch1.12.1.901
ORx.orgxorg-serverMatch1.12.1.902
ORx.orgxorg-serverMatch1.12.2
ORx.orgxorg-serverMatch1.12.2.901
ORx.orgxorg-serverMatch1.12.2.902
ORx.orgxorg-serverMatch1.12.3
ORx.orgxorg-serverMatch1.12.3.901
ORx.orgxorg-serverMatch1.12.3.902
ORx.orgxorg-serverMatch1.12.4
ORx.orgxorg-serverMatch1.12.99.901
ORx.orgxorg-serverMatch1.12.99.902
ORx.orgxorg-serverMatch1.12.99.903
ORx.orgxorg-serverMatch1.12.99.904
ORx.orgxorg-serverMatch1.12.99.905
ORx.orgxorg-serverMatch1.13.0
ORx.orgxorg-serverMatch1.13.0.901
ORx.orgxorg-serverMatch1.13.0.902
ORx.orgxorg-serverMatch1.13.1
ORx.orgxorg-serverMatch1.13.1.901
ORx.orgxorg-serverMatch1.13.2
ORx.orgxorg-serverMatch1.13.2.901
ORx.orgxorg-serverMatch1.13.2.902
ORx.orgxorg-serverMatch1.13.3
ORx.orgxorg-serverMatch1.13.4
ORx.orgxorg-serverMatch1.13.99.901
ORx.orgxorg-serverMatch1.13.99.902
ORx.orgxorg-serverMatch1.14.0
ORx.orgxorg-serverMatch1.14.1
ORx.orgxorg-serverMatch1.14.1.901
ORx.orgxorg-serverMatch1.14.1.902
ORx.orgxorg-serverMatch1.14.2
ORx.orgxorg-serverMatch1.14.2rc1
ORx.orgxorg-serverMatch1.14.2.901
ORx.orgxorg-serverMatch1.14.2.902
ORx.orgxorg-serverMatch1.14.3
ORx.orgxorg-serverMatch1.14.3.901
ORx.orgxorg-serverMatch1.14.3.901rc1
ORx.orgxorg-serverMatch1.14.4
ORx.orgxorg-serverMatch1.14.4.901
ORx.orgxorg-serverMatch1.14.5
ORx.orgxorg-serverMatch1.14.5.901
ORx.orgxorg-serverMatch1.14.6
ORx.orgxorg-serverMatch1.14.7
ORx.orgxorg-serverMatch1.14.99.1
ORx.orgxorg-serverMatch1.14.99.2
ORx.orgxorg-serverMatch1.14.99.3
ORx.orgxorg-serverMatch1.14.99.901
ORx.orgxorg-serverMatch1.14.99.902
ORx.orgxorg-serverMatch1.14.99.903
ORx.orgxorg-serverMatch1.14.99.904
ORx.orgxorg-serverMatch1.14.99.905
ORx.orgxorg-serverMatch1.15.0
ORx.orgxorg-serverMatch1.15.0.901
ORx.orgxorg-serverMatch1.15.1
ORx.orgxorg-serverMatch1.15.2
ORx.orgxorg-serverMatch1.15.99.901
ORx.orgxorg-serverMatch1.15.99.902
ORx.orgxorg-serverMatch1.15.99.903
ORx.orgxorg-serverMatch1.15.99.904
ORx.orgxorg-serverMatch1.16.0
ORx.orgxorg-serverMatch1.16.0.901
ORx.orgxorg-serverMatch1.16.1
ORx.orgxorg-serverMatch1.16.1.901
ORx.orgxorg-serverMatch1.16.2
ORx.orgxorg-serverMatch1.16.2.99.901
ORx.orgxorg-serverMatch1.16.2.901
Node
oraclesolarisMatch10
ORoraclesolarisMatch11.2
Node
debiandebian_linuxMatch7.0
References
advisories.mageia.org/MGASA-2014-0532.html
secunia.com/advisories/61947
secunia.com/advisories/62292
www.debian.org/security/2014/dsa-3095
www.mandriva.com/security/advisories?name=MDVSA-2015:119
www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
www.securityfocus.com/bid/71601
www.x.org/wiki/Development/Security/Advisory-2014-12-09/
security.gentoo.org/glsa/201504-06
Related
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:05:57
nvd
nvd
CVE-2014-8094
2014-12-10 15:59:06
cvelist
cvelist
CVE-2014-8094
2014-12-10 15:00:00
debiancve
debiancve
CVE-2014-8094
2014-12-10 15:59:06
prion
prion
Integer overflow
2014-12-10 15:59:00
ubuntucve
ubuntucve
CVE-2014-8094
2014-12-09 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0532)
2022-01-28 00:00:00
Debian Security Advisory DSA 3095-1 (xorg-server - security update)
2014-12-10 00:00:00
Oracle: Security Advisory (ELSA-2014-1983)
2015-10-06 00:00:00
freebsd
freebsd
xserver -- multiple issue with X client request handling
2014-12-09 00:00:00
osv
osv
xorg-server - security update
2014-12-10 00:00:00
nessus
nessus
debian
debian
[SECURITY] [DLA 120-1] xorg-server security update
2014-12-22 10:23:16
[SECURITY] [DSA 3095-1] xorg-server security update
2014-12-10 18:32:55
mageia
mageia
Updated x11-server packages fix security vulnerabilities
2014-12-19 18:06:35
amazon
amazon
Important: xorg-x11-server
2015-01-15 14:49:00
redhat
redhat
(RHSA-2014:1983) Important: xorg-x11-server security update
2014-12-11 00:00:00
securityvulns
securityvulns
[USN-2436-1] X.Org X server vulnerabilities
2014-12-11 00:00:00
X.Org X server and video drivers multiple security vulnerabilities
2014-12-11 00:00:00
suse
suse
Security update for xorg-x11-server (important)
2015-01-14 23:04:43
ibm
ibm
oraclelinux
oraclelinux
xorg-x11-server security update
2014-12-11 00:00:00
archlinux
archlinux
xorg-server: multiple issues
2014-12-12 00:00:00
centos
centos
xorg security update
2014-12-11 19:58:14
slackware
slackware
[slackware-security] xorg-server
2014-12-23 05:39:09
ubuntu
ubuntu
X.Org X server vulnerabilities
2014-12-09 00:00:00
gentoo
gentoo
X.Org X Server: Multiple vulnerabilities
2015-04-17 00:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.8%
Related for CVE-2014-8094