Memory Information Disclosure and Denial of Service in X.Org Server
CVE-2015-0255

Currently unrated

Key Information:

Vendor

X.org

Status
Xorg-server
Vendor
CVE Published:
13 February 2015

What is CVE-2015-0255?

The X.Org Server is vulnerable to a potentially exploitable flaw that allows remote attackers to retrieve sensitive information from process memory or trigger a denial of service through a specially crafted string length value in an XkbSetGeometry request. This issue primarily affects versions prior to 1.16.3 and those in the 1.17.x series before 1.17.1. Security patches are available, and users are advised to update their installations promptly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://lists.opensuse.org/opensuse-updates/2015-02/msg000...
vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security/cpujul2...
x_refsource_CONFIRM
https://security.gentoo.org/glsa/201504-06
vendor-advisoryx_refsource_GENTOO

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.