4.3

CVE-2014-8091

EPSS 6.31%
Published 10.12.2014 15:59:02
Last modified 29.08.2025 13:42:30
Source secalert@redhat.com
Teams watchlist Login
Open Login

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a crafted connection request.

Affected products Warnungen 0 Metrics 2 CWE 0 References 14

Data is provided by the National Vulnerability Database (NVD)

X.Org ≫ X Server Version <= 1.16.2

X.Org ≫ X11 Version5.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	6.31%	0.9

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

http://advisories.mageia.org/MGASA-2014-0532.html

http://secunia.com/advisories/61947

http://secunia.com/advisories/62292

http://www.debian.org/security/2014/dsa-3095

http://www.mandriva.com/security/advisories?name=MDVSA-2015:119

http://www.securityfocus.com/bid/71597

http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/

Patch

Vendor Advisory

https://security.gentoo.org/glsa/201504-06

https://nvd.nist.gov/vuln/detail/CVE-2014-8091

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8091

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8091

EUVD