CVE-2014-8094
Published: 9 December 2014
Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write.
Priority
Status
Package | Release | Status |
---|---|---|
xorg-server Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
precise |
Released
(2:1.11.4-0ubuntu10.15)
|
|
trusty |
Released
(2:1.15.1-0ubuntu2.4)
|
|
upstream |
Released
(2:1.16.2.901-1)
|
|
utopic |
Released
(2:1.16.0-1ubuntu1.1)
|
|
xorg-server-lts-trusty Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Released
(2:1.15.1-0ubuntu2~precise3)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
utopic |
Does not exist
|