CVE-2014-8091
Published: 9 December 2014
X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a crafted connection request.
Priority
Status
Package | Release | Status |
---|---|---|
nvidia-graphics-drivers-304 Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Released
(304.125-0ubuntu0.0.0.1)
|
|
trusty |
Released
(304.125-0ubuntu0.0.1)
|
|
upstream |
Released
(304.125)
|
|
utopic |
Released
(304.125-0ubuntu0.1)
|
|
nvidia-graphics-drivers-304-updates Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Released
(304.125-0ubuntu0.0.0.1)
|
|
trusty |
Released
(304.125-0ubuntu0.0.1)
|
|
upstream |
Released
(304.125)
|
|
utopic |
Released
(304.125-0ubuntu0.1)
|
|
nvidia-graphics-drivers-331 Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Released
(331.113-0ubuntu0.0.0.3)
|
|
trusty |
Released
(331.113-0ubuntu0.0.4)
|
|
upstream |
Released
(331.113)
|
|
utopic |
Released
(331.113-0ubuntu0.1)
|
|
nvidia-graphics-drivers-331-updates Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Released
(331.113-0ubuntu0.0.0.3)
|
|
trusty |
Released
(331.113-0ubuntu0.0.4)
|
|
upstream |
Released
(331.113)
|
|
utopic |
Released
(331.113-0ubuntu0.1)
|
|
xorg-server Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
precise |
Released
(2:1.11.4-0ubuntu10.15)
|
|
trusty |
Released
(2:1.15.1-0ubuntu2.4)
|
|
upstream |
Released
(2:1.16.2.901-1)
|
|
utopic |
Released
(2:1.16.0-1ubuntu1.1)
|
|
xorg-server-lts-trusty Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Released
(2:1.15.1-0ubuntu2~precise3)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
utopic |
Does not exist
|