{"id":"CVE-2014-8099","aliases":["DEBIAN-CVE-2014-8099","DLA-120-1","DSA-3095-1","EUVD-2014-7946","GHSA-5grc-mxpq-pvhg","MGASA-2014-0532","RHSA-2014:1982","RHSA-2014:1983","SUSE-SU-2015:0427-1","SUSE-SU-2015:1025-1","UBUNTU-CVE-2014-8099","USN-2436-1"],"status":"published","title":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org...","description":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04316,"percentile":0.91224,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-06-27T12:01:01Z","modified":"2026-10-23T15:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","fixed_in":["2:1.15.1-0ubuntu2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.7-18+deb6u1"}]}],"versions":["2:1.7.7-11","2:1.7.7-12","2:1.7.7-13","2:1.7.7-14","2:1.7.7-15","2:1.7.7-16","2:1.7.7-17","2:1.7.7-18"],"bundled":12},{"source":"osv","ecosystem":"Debian:7","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.4-6+deb7u5"}]}],"versions":["2:1.12.4-6","2:1.12.4-6+deb7u1","2:1.12.4-6+deb7u2","2:1.12.4-6+deb7u3","2:1.12.4-6+deb7u4"],"bundled":12},{"source":"osv","ecosystem":"Mageia:4","package":"x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-2.1.mga4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvnc-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvnc-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.107.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.4"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.4"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1"],"bundled":13}],"products":[{"vendor":"x.org","product":"x11"},{"vendor":"x.org","product":"x_server"},{"vendor":"x.org","product":"xfree86"}],"references":[{"url":"http://www.debian.org/security/2014/dsa-3095","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","web","article","report"]},{"url":"http://advisories.mageia.org/MGASA-2014-0532.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/201504-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/62292","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/71600","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:119","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61947","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8099","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1982","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1983","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168710","tags":["report"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2014-12-09"},{"url":"https://github.com/advisories/GHSA-5grc-mxpq-pvhg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-8099","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0532.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14767","tags":["report"]},{"url":"https://www.debian.org/security/2014/dsa-3095","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168714","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1982.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8091","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8093","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8093","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8095","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8098","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8098","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8099","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8100","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8101","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8102","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168716","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1983.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8094","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8103","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8103","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150427-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/816813","tags":["report"]},{"url":"https://bugzilla.suse.com/843652","tags":["report"]},{"url":"https://bugzilla.suse.com/853846","tags":["report"]},{"url":"https://bugzilla.suse.com/864911","tags":["report"]},{"url":"https://bugzilla.suse.com/874903","tags":["report"]},{"url":"https://bugzilla.suse.com/878433","tags":["report"]},{"url":"https://bugzilla.suse.com/878446","tags":["report"]},{"url":"https://bugzilla.suse.com/879019","tags":["report"]},{"url":"https://bugzilla.suse.com/880745","tags":["report"]},{"url":"https://bugzilla.suse.com/880835","tags":["report"]},{"url":"https://bugzilla.suse.com/883051","tags":["report"]},{"url":"https://bugzilla.suse.com/883516","tags":["report"]},{"url":"https://bugzilla.suse.com/883598","tags":["report"]},{"url":"https://bugzilla.suse.com/886213","tags":["report"]},{"url":"https://bugzilla.suse.com/907268","tags":["report"]},{"url":"https://bugzilla.suse.com/907633","tags":["report"]},{"url":"https://bugzilla.suse.com/915810","tags":["report"]},{"url":"https://bugzilla.suse.com/928520","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3418","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151025-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8099","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2436-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8103","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-8099","description":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.","status":"published","published":"2014-12-10T15:00:00Z","modified":"2024-08-06T13:10:50.793Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-7946","description":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.","status":"published","published":"2014-12-10T15:00:00Z","modified":"2024-08-06T13:10:50Z","updated_at":"2026-11-03T01:56:52.951821Z"}],"ghsa":[{"id":"GHSA-5grc-mxpq-pvhg","title":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org...","description":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.","status":"published","published":"2022-05-17T03:11:05Z","modified":"2025-04-12T12:43:47Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:19.873405Z"}],"nvd":[{"id":"CVE-2014-8099","description":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.","status":"published","published":"2014-12-10T15:59:11.957Z","modified":"2026-06-17T00:16:14.313Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"CVE-2014-8099","description":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.","status":"published","published":"2014-12-10T15:59:11Z","modified":"2026-04-16T06:17:15.59351048Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-8099","description":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.","status":"published","published":"2014-12-10T15:59:11.957Z","modified":"2026-10-23T15:47:25.738581773Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-120-1","title":"xorg-server - security update","status":"published","published":"2014-12-22T00:00:00Z","modified":"2026-03-09T01:01:16.09848Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3095-1","title":"xorg-server - security update","status":"published","published":"2014-12-10T00:00:00Z","modified":"2026-03-09T01:20:14.680488Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0532","title":"Updated x11-server packages fix security vulnerabilities","description":"Ilja van Sprundel of IOActive discovered several security issues in the X.org\nX server, which may lead to privilege escalation or denial of service\n(CVE-2014-8091, CVE-2014-8092, CVE-2014-8093, CVE-2014-8094, CVE-2014-8095,\nCVE-2014-8096, CVE-2014-8097, CVE-2014-8098, CVE-2014-8099, CVE-2014-8100,\nCVE-2014-8101, CVE-2014-8102).\n","status":"published","published":"2014-12-19T15:06:35Z","modified":"2026-04-16T06:22:47.865297234Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHSA-2014:1982","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-15T22:13:59Z","modified":"2026-06-28T10:12:28Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1983","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-15T22:14:06Z","modified":"2026-06-28T10:12:28Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0427-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:12:31.989382Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1025-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:55:40.562616Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-8099","description":"The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.","status":"published","published":"2014-12-09T00:00:00Z","modified":"2026-04-22T09:51:48.291619Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2436-1","title":"xorg-server, xorg-server-lts-trusty vulnerabilities","description":"Ilja van Sprundel discovered a multitude of security issues in the X.Org X\nserver. An attacker able to connect to an X server, either locally or\nremotely, could use these issues to cause the X server to crash or execute\narbitrary code resulting in possible privilege escalation.\n","status":"published","published":"2014-12-09T18:36:18Z","modified":"2026-04-22T09:03:35.836492Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}