Information Disclosure

2019-01-1509:05:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.079 Low

EPSS

Percentile

94.3%

JSON

xorg-x11-server is vulnerable to information disclosure attacks. The vulnerability exists as X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.

CPENameOperatorVersion
xorg-x11-servereq1.7.7__26.el6
xorg-x11-servereq1.15.0__25.1.el6_6
xorg-x11-servereq1.10.4__6.el6
xorg-x11-servereq1.13.0__23.el6
xorg-x11-servereq1.15.0__22.el6
xorg-x11-servereq1.10.6__1.el6
xorg-x11-servereq1.7.7__29.el6
xorg-x11-servereq1.13.0__11.el6
xorg-x11-servereq1.15.0__25.el6_6
xorg-x11-servereq1.10.4__6.el6_2.3

Name	Operator	Version
xorg-x11-server	eq	1.7.7__26.el6
xorg-x11-server	eq	1.15.0__25.1.el6_6
xorg-x11-server	eq	1.10.4__6.el6
xorg-x11-server	eq	1.13.0__23.el6
xorg-x11-server	eq	1.15.0__22.el6
xorg-x11-server	eq	1.10.6__1.el6
xorg-x11-server	eq	1.7.7__29.el6
xorg-x11-server	eq	1.13.0__11.el6
xorg-x11-server	eq	1.15.0__25.el6_6
xorg-x11-server	eq	1.10.4__6.el6_2.3