Every CVE Search/ Get API key

CVE-2014-8099

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org...

6.5 MediumFix available

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

Exploit likelihood

4.32%Down 1.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

Record
CVE-2014-8099
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

Record
CVE-2014-8099
Updated
2026-11-02
EUVDEUVD-2014-7946 No score

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

Record
EUVD-2014-7946
Updated
2026-11-03
GitHub AdvisoriesGHSA-5grc-mxpq-pvhg No score

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org...

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

Record
GHSA-5grc-mxpq-pvhg
Weakness
CWE-119
Updated
2026-11-02
OSV No score

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

Record
CVE-2014-8099
Updated
2026-11-02
OSVDEBIAN-CVE-2014-8099 No score

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

Record
DEBIAN-CVE-2014-8099
Updated
2026-11-02
Show 5 moreShow less
OSVMGASA-2014-0532 No score

Updated x11-server packages fix security vulnerabilities

Ilja van Sprundel of IOActive discovered several security issues in the X.org X server, which may lead to privilege escalation or denial of service (CVE-2014-8091, CVE-2014-8092, CVE-2014-8093, CVE-2014-8094, CVE-2014-8095, CVE-2014-8096, CVE-2014-8097, CVE-2014-8098, CVE-2014-8099, CVE-2014-8100, CVE-2014-8101, CVE-2014-8102).

Record
MGASA-2014-0532
Updated
2026-11-02
OSVSUSE-SU-2015:0427-1 No score

Recommended update for xorg-x11-server

This collective update for xorg-x11-server provides the following fixes:

* Fix a segmentation fault that can occur when X11 packets are
  forwarded between a client and a server with different endianess.
  (bnc#874903)
* Free software cursor backing pixmap when transition between screens.
  This fixes a crash in multi screen support when an assert gets hit.
  (bnc#880835)
* Ignore numlock in Xvnc. Following keys from VNC client will be
  already modulated by numlock on client side. (bnc#878446)
* Fix crash when Xinerama gets disabled after RanR12 is initialized.
  (bnc#878433)
* Prevent crash at the end of 2nd server generation when number of
  privates differ between 1st and 2nd. (bnc#883598)
* Move Xinerama disable when only one screen is present to main loop.
  (bnc#883598)
* Improve Xinerama command line option handling. (bnc#883598)
* Work around a possible crash when object belongs to a client that no
  longer exists. (bnc#883516)
* Try to make keyboard bell ring on all devices attached to master
  keyboard. (bnc#879019)
* Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when
  the Xserver restarts after a server reset. (bnc#880745).
Record
SUSE-SU-2015:0427-1
Updated
2026-11-02
OSVSUSE-SU-2015:1025-1 No score

Recommended update for xorg-x11-server

This collective update for xorg-x11-server provides the following fixes:

* Fix a segmentation fault that can occur when X11 packets are
  forwarded between a client and a server with different endianess.
  (bnc#874903)
* Free software cursor backing pixmap when transition between screens.
  This fixes a crash in multi screen support when an assert gets hit.
  (bnc#880835)
* Ignore numlock in Xvnc. Following keys from VNC client will be
  already modulated by numlock on client side. (bnc#878446)
* Fix crash when Xinerama gets disabled after RanR12 is initialized.
  (bnc#878433)
* Prevent crash at the end of 2nd server generation when number of
  privates differ between 1st and 2nd. (bnc#883598)
* Move Xinerama disable when only one screen is present to main loop.
  (bnc#883598)
* Improve Xinerama command line option handling. (bnc#883598)
* Work around a possible crash when object belongs to a client that no
  longer exists. (bnc#883516)
* Try to make keyboard bell ring on all devices attached to master
  keyboard. (bnc#879019)
* Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when
  the Xserver restarts after a server reset. (bnc#880745).
Record
SUSE-SU-2015:1025-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-8099 No score

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

Record
UBUNTU-CVE-2014-8099
Updated
2026-11-02
OSVUSN-2436-1 No score

xorg-server, xorg-server-lts-trusty vulnerabilities

Ilja van Sprundel discovered a multitude of security issues in the X.Org X server. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation.

Record
USN-2436-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xorg-server
Debian:12
before 2:1.16.2.901-1
2:1.16.2.901-1
xorg-server
Debian:13
before 2:1.16.2.901-1
2:1.16.2.901-1
xorg-server
Debian:14
before 2:1.16.2.901-1
2:1.16.2.901-1
xorg-server
Debian:6.0
From an advisory covering 12 CVEs
before 2:1.7.7-18+deb6u1, plus listed versions
2:1.7.7-112:1.7.7-122:1.7.7-132:1.7.7-142:1.7.7-152:1.7.7-162:1.7.7-172:1.7.7-18
2:1.7.7-18+deb6u1
xorg-server
Debian:7
From an advisory covering 12 CVEs
before 2:1.12.4-6+deb7u5, plus listed versions
2:1.12.4-62:1.12.4-6+deb7u12:1.12.4-6+deb7u22:1.12.4-6+deb7u32:1.12.4-6+deb7u4
2:1.12.4-6+deb7u5
x11-server
Mageia:4
From an advisory covering 12 CVEs
before 1.14.5-2.1.mga4
1.14.5-2.1.mga4
xorg-x11-server
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xnest
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
Show 98 moreShow less
Affected packages
PackageAffectedFixed
xorg-x11-server-Xorg
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xvnc-source
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-sdk
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xnest
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xorg
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-Xvnc-source
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server-sdk
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:1.1.1-48.107.el5_11
0:1.1.1-48.107.el5_11
xorg-x11-server
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xorg
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-common
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xnest
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-source
Red Hat:enterprise_linux:6::client
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xnest
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xorg
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-source
Red Hat:enterprise_linux:6::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xorg
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-common
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xnest
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-source
Red Hat:enterprise_linux:6::server
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xorg
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xnest
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server-source
Red Hat:enterprise_linux:6::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-25.el6_6
0:1.15.0-25.el6_6
xorg-x11-server
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xorg
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-common
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xnest
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-source
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xnest
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xorg
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-common
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-source
Red Hat:enterprise_linux:7::computenode
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xorg
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-common
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xnest
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-source
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xorg
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-common
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xnest
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-x11-server-source
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
before 0:1.15.0-7.el7_0.3
0:1.15.0-7.el7_0.3
xorg-server
Ubuntu:14.04:LTS
before 2:1.15.1-0ubuntu2.4, plus listed versions
2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1
Show 13 moreShow less
2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.1
2:1.15.1-0ubuntu2.4
xorg-server
Ubuntu:14.04:LTS
From an advisory covering 13 CVEs
before 2:1.15.1-0ubuntu2.4, plus listed versions
2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1
Show 13 moreShow less
2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.1
2:1.15.1-0ubuntu2.4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8099 is a medium vulnerability (CVSS 6.5) in X.org X11, published June 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.32%, the 91st percentile. Fixed in xorg-server 2:1.16.2.901-1.

References

Show 113 moreShow less
MoveEnter Open