USN-2436-2
xorg-server, xorg-server-lts-trusty vulnerabilities
USN-2436-1 fixed vulnerabilities in the X.Org X server. Since publication, additional fixes have been made available for these issues. This update adds the additional fixes.
Original advisory details:
Ilja van Sprundel discovered a multitude of security issues in the X.Org X server. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation.
What each source reports
OSV No score
xorg-server, xorg-server-lts-trusty vulnerabilities
USN-2436-1 fixed vulnerabilities in the X.Org X server. Since publication, additional fixes have been made available for these issues. This update adds the additional fixes.
Original advisory details:
Ilja van Sprundel discovered a multitude of security issues in the X.Org X server. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation.
- Record
USN-2436-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xorg-serverUbuntu:14.04:LTS |
before 2:1.15.1-0ubuntu2.5, plus listed versions 2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1 Show 14 moreShow less2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.4 |
2:1.15.1-0ubuntu2.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2436-2 is a vulnerability with no CVSS score yet in xorg-server, published December 10, 2014. No source lists public exploit code. Fixed in xorg-server 2:1.15.1-0ubuntu2.5.