CVE-2015-0255
Fixed in a distro release EPSS 4%
X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.
Products: x.org x_server, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xorg-server | 2:1.16.4-1 |
| Debian 13 | xorg-server | 2:1.16.4-1 |
| Debian 14 | xorg-server | 2:1.16.4-1 |
| Debian 6.0 | xorg-server | 2:1.7.7-18+deb6u2 |
| Debian 7 | xorg-server | 2:1.12.4-6+deb7u6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xdmx | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xephyr | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xnest | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xorg | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xvfb | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-common | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-debuginfo | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-devel | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-source | 0:1.15.0-26.el6_6 |
| Red Hat Enterprise Linux 7 | xorg-x11-server | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xdmx | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xdmx | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xephyr | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xephyr | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xnest | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xnest | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xorg | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xorg | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xvfb | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xvfb | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-common | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-common | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-debuginfo | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-debuginfo | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-devel | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-devel | 0:1.15.0-33.ael7b_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-source | 0:1.15.0-33.el7_1 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-source | 0:1.15.0-33.ael7b_1 |
| SUSE Linux Enterprise Desktop 12 | fltk | 1.3.2-10.2 |
| SUSE Linux Enterprise Desktop 12 | tigervnc | 1.4.1-32.1 |
| SUSE Linux Enterprise Desktop 12 | xorg-x11-server | 7.6_1.15.2-21.1 |
| SUSE Linux Enterprise Server 12 | fltk | 1.3.2-10.2 |
| SUSE Linux Enterprise Server 12 | tigervnc | 1.4.1-32.1 |
| SUSE Linux Enterprise Server 12 | xorg-x11-server | 7.6_1.15.2-21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | fltk | 1.3.2-10.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 | tigervnc | 1.4.1-32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | xorg-x11-server | 7.6_1.15.2-21.1 |
| SUSE Linux Enterprise Software Development Kit 12 | fltk | 1.3.2-10.2 |
| SUSE Linux Enterprise Software Development Kit 12 | xorg-x11-server | 7.6_1.15.2-21.1 |
| Ubuntu 14.04 LTS | xorg-server | 2:1.15.1-0ubuntu2.7 |
| Ubuntu 14.04 LTS | xorg-server-lts-utopic | 2:1.16.0-1ubuntu1.2~trusty2 |
| Ubuntu 18.04 LTS | vnc4 | no fix |
| Ubuntu Pro 14.04 LTS | vnc4 | 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1 |
| Ubuntu Pro 16.04 LTS | vnc4 | 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1 |
| openSUSE Tumbleweed | tigervnc | 1.7.0-2.1 |