X.Org X server vulnerability

2013-04-1700:00:00

ubuntu.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.6

Confidence

Low

EPSS

0.001

Percentile

25.0%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10
Ubuntu 10.04

Packages

xorg-server - X.Org X server
xorg-server-lts-quantal - X.Org X server

Details

It was discovered that the X.Org X server did not properly clear input
events in certain circumstances. A local attacker with physical access
could use this flaw to capture keystrokes.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchxserver-xorg-core< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxdmx< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxdmx-tools< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxnest< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxserver-xephyr< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxserver-xfbdev< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxserver-xorg-core-dbg< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxserver-xorg-core-udeb< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxserver-xorg-dev< 2:1.13.0-0ubuntu6.2UNKNOWN
Ubuntu12.10noarchxvfb< 2:1.13.0-0ubuntu6.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.10	noarch	xserver-xorg-core	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xdmx	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xdmx-tools	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xnest	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xserver-xephyr	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xserver-xfbdev	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xserver-xorg-core-dbg	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xserver-xorg-core-udeb	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xserver-xorg-dev	< 2:1.13.0-0ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	xvfb	< 2:1.13.0-0ubuntu6.2	UNKNOWN