{"id":"CVE-2014-8093","aliases":["DEBIAN-CVE-2014-8093","DLA-120-1","DSA-3095-1","EUVD-2014-7940","GHSA-jv75-r474-7vqf","MGASA-2014-0532","MGASA-2015-0005","RHSA-2014:1982","RHSA-2014:1983","SUSE-SU-2015:0427-1","SUSE-SU-2015:1025-1","UBUNTU-CVE-2014-8093","USN-2436-1"],"status":"published","title":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or...","description":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04373,"percentile":0.91334,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-06-27T12:01:01Z","modified":"2026-10-23T15:47:24Z","fixes":[{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","fixed_in":["2:1.15.1-0ubuntu2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.7-18+deb6u1"}]}],"versions":["2:1.7.7-11","2:1.7.7-12","2:1.7.7-13","2:1.7.7-14","2:1.7.7-15","2:1.7.7-16","2:1.7.7-17","2:1.7.7-18"],"bundled":12},{"source":"osv","ecosystem":"Debian:7","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.4-6+deb7u5"}]}],"versions":["2:1.12.4-6","2:1.12.4-6+deb7u1","2:1.12.4-6+deb7u2","2:1.12.4-6+deb7u3","2:1.12.4-6+deb7u4"],"bundled":12},{"source":"osv","ecosystem":"Mageia:4","package":"x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-2.1.mga4"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"331.113-1.mga4.nonfree"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"331.113-1.mga4.nonfree"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.125-1.mga4.nonfree"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.125-1.mga4.nonfree"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvnc-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvnc-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.4"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.4"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1"],"bundled":13}],"products":[{"vendor":"x.org","product":"x11"},{"vendor":"x.org","product":"x_server"},{"vendor":"x.org","product":"xfree86"}],"references":[{"url":"http://www.debian.org/security/2014/dsa-3095","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","web","article","report"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/3610","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://advisories.mageia.org/MGASA-2014-0532.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/201504-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/62292","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/71596","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:119","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61947","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8093","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1982","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1983","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168688","tags":["report"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2014-12-09"},{"url":"https://github.com/advisories/GHSA-jv75-r474-7vqf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-8093","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0532.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14767","tags":["report"]},{"url":"https://www.debian.org/security/2014/dsa-3095","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0005.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14787","tags":["report"]},{"url":"http://lwn.net/Vulnerabilities/625511/","tags":["web"]},{"url":"http://www.ubuntu.com/usn/usn-2438-1/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168714","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1982.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8091","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8092","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8093","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8095","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8098","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8098","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8099","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8100","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8101","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8102","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168716","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1983.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8094","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8103","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8103","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150427-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/816813","tags":["report"]},{"url":"https://bugzilla.suse.com/843652","tags":["report"]},{"url":"https://bugzilla.suse.com/853846","tags":["report"]},{"url":"https://bugzilla.suse.com/864911","tags":["report"]},{"url":"https://bugzilla.suse.com/874903","tags":["report"]},{"url":"https://bugzilla.suse.com/878433","tags":["report"]},{"url":"https://bugzilla.suse.com/878446","tags":["report"]},{"url":"https://bugzilla.suse.com/879019","tags":["report"]},{"url":"https://bugzilla.suse.com/880745","tags":["report"]},{"url":"https://bugzilla.suse.com/880835","tags":["report"]},{"url":"https://bugzilla.suse.com/883051","tags":["report"]},{"url":"https://bugzilla.suse.com/883516","tags":["report"]},{"url":"https://bugzilla.suse.com/883598","tags":["report"]},{"url":"https://bugzilla.suse.com/886213","tags":["report"]},{"url":"https://bugzilla.suse.com/907268","tags":["report"]},{"url":"https://bugzilla.suse.com/907633","tags":["report"]},{"url":"https://bugzilla.suse.com/915810","tags":["report"]},{"url":"https://bugzilla.suse.com/928520","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3418","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151025-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8093","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2436-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8103","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-8093","description":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.","status":"published","published":"2014-12-10T15:00:00Z","modified":"2024-08-06T13:10:50.027Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-7940","description":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.","status":"published","published":"2014-12-10T15:00:00Z","modified":"2024-08-06T13:10:50Z","updated_at":"2026-11-03T01:56:52.951821Z"}],"ghsa":[{"id":"GHSA-jv75-r474-7vqf","title":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or...","description":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.","status":"published","published":"2022-05-17T03:11:05Z","modified":"2025-04-12T12:42:44Z","updated_at":"2026-11-02T15:01:19.407948Z"}],"nvd":[{"id":"CVE-2014-8093","description":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.","status":"published","published":"2014-12-10T15:59:05.86Z","modified":"2026-06-17T00:16:13.57Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"CVE-2014-8093","description":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.","status":"published","published":"2014-12-10T15:59:05Z","modified":"2026-04-16T06:21:20.00002227Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-8093","description":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.","status":"published","published":"2014-12-10T15:59:05.86Z","modified":"2026-10-23T15:47:24.655623727Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-120-1","title":"xorg-server - security update","status":"published","published":"2014-12-22T00:00:00Z","modified":"2026-03-09T01:01:16.09848Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3095-1","title":"xorg-server - security update","status":"published","published":"2014-12-10T00:00:00Z","modified":"2026-03-09T01:20:14.680488Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0532","title":"Updated x11-server packages fix security vulnerabilities","description":"Ilja van Sprundel of IOActive discovered several security issues in the X.org\nX server, which may lead to privilege escalation or denial of service\n(CVE-2014-8091, CVE-2014-8092, CVE-2014-8093, CVE-2014-8094, CVE-2014-8095,\nCVE-2014-8096, CVE-2014-8097, CVE-2014-8098, CVE-2014-8099, CVE-2014-8100,\nCVE-2014-8101, CVE-2014-8102).\n","status":"published","published":"2014-12-19T15:06:35Z","modified":"2026-04-16T06:22:47.865297234Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2015-0005","title":"Updated nvidia packages fix security vulnerabilities","description":"Updated nvidia304 and nvidia-current drivers fixes security issues:\n\nThe NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before\nR331.113, R340.x before R340.65, R343.x before R343.36, and R346.x\nbefore R346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome\nOS driver before R40 allows remote attackers to cause a denial of\nservice (segmentation fault and X server crash) or possibly execute\narbitrary code via a crafted GLX indirect rendering protocol request\n(CVE-2014-8093, CVE-2014-8098, CVE-2014-8298).\n\nNote, the nvidia173 173.14.39 driver in Mageia 4 is also vulnerable\nto this issue, but as it has reached EOL upstream it wont get any\nfixes for this.\n\nFor nvidia-cuda-toolkit, it's safe to use with the fixed nvidia304\nand nvidia-current drivers released as part of this update.\n","status":"published","published":"2015-01-07T15:14:58Z","modified":"2026-04-16T06:25:44.565495804Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHSA-2014:1982","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-15T22:13:59Z","modified":"2026-06-28T10:12:28Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1983","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-15T22:14:06Z","modified":"2026-06-28T10:12:28Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0427-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:12:31.989382Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1025-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:55:40.562616Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-8093","description":"Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.","status":"published","published":"2014-12-09T00:00:00Z","modified":"2026-04-22T09:50:38.86119Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2436-1","title":"xorg-server, xorg-server-lts-trusty vulnerabilities","description":"Ilja van Sprundel discovered a multitude of security issues in the X.Org X\nserver. An attacker able to connect to an X server, either locally or\nremotely, could use these issues to cause the X server to crash or execute\narbitrary code resulting in possible privilege escalation.\n","status":"published","published":"2014-12-09T18:36:18Z","modified":"2026-04-22T09:03:35.836492Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}