CVE-2015-3164
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non...
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
Exploit likelihood
What each source reports
NVD Score used
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
- Record
CVE-2015-3164- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
- Record
CVE-2015-3164- Updated
- 2026-11-02
EUVDEUVD-2015-3242 No score
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
- Record
EUVD-2015-3242- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fww3-c3xq-2xqg No score
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non...
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
- Record
GHSA-fww3-c3xq-2xqg- Updated
- 2026-11-02
OSV No score
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
- Record
CVE-2015-3164- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-3164 No score
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
- Record
DEBIAN-CVE-2015-3164- Updated
- 2026-11-02
OSVMGASA-2015-0316 No score
Updated x11-server packages fix security vulnerability
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket (CVE-2015-3164).
- Record
MGASA-2015-0316- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10518-1 No score
xorg-x11-server-7.6_1.18.4-2.1 on GA media
These are all security issues fixed in the xorg-x11-server-7.6_1.18.4-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10518-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-3164 No score
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
- Record
UBUNTU-CVE-2015-3164- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xorg-serverDebian:12 |
before 2:1.17.2-1 | 2:1.17.2-1 |
xorg-serverDebian:13 |
before 2:1.17.2-1 | 2:1.17.2-1 |
xorg-serverDebian:14 |
before 2:1.17.2-1 | 2:1.17.2-1 |
x11-serverMageia:5 |
before 1.16.4-2.1.mga5 | 1.16.4-2.1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3164 is a low vulnerability (CVSS 3.6) in Opensuse, published July 1, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in xorg-server 2:1.17.2-1.
References
lists.freedesktop.org/archives/wayland-devel/2015-June/022548.html
securityfocus.com/bid/75535
security.gentoo.org/glsa/201701-64
lists.opensuse.org/opensuse-updates/2015-06/msg00044.html
nvd.nist.gov/vuln/detail/CVE-2015-3164
github.com/advisories/GHSA-fww3-c3xq-2xqg
Show 11 moreShow less
security-tracker.debian.org/tracker/CVE-2015-3164
advisories.mageia.org/MGASA-2015-0316.html
bugs.mageia.org/show_bug.cgi?id=16182
lists.x.org/archives/xorg-announce/2015-June/002611.html
ubuntu.com/security/CVE-2015-3164
cve.org/CVERecord?id=CVE-2015-3164
suse.com/security/cve/CVE-2010-2240