{"id":"CVE-2014-8103","aliases":["DEBIAN-CVE-2014-8103","EUVD-2014-7950","GHSA-cjgj-pfcg-8ccj","RHSA-2014:1983","UBUNTU-CVE-2014-8103","USN-2436-1"],"status":"published","title":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote...","description":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03379,"percentile":0.8886,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-12-09T00:00:00Z","modified":"2026-10-23T15:47:31Z","fixes":[{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:1.16.2.901-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","fixed_in":["2:1.15.1-0ubuntu2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.2.901-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-25.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el7_0.3"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.4"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.4"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1"],"bundled":13}],"products":[{"vendor":"x.org","product":"x_server"}],"references":[{"url":"http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","article","report"]},{"url":"https://security.gentoo.org/glsa/201504-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61947","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8103","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1983","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168716","tags":["report"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2014-12-09"},{"url":"https://github.com/advisories/GHSA-cjgj-pfcg-8ccj"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-8103","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168714","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1983.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8091","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8093","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8093","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8094","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8095","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8098","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8098","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8099","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8100","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8101","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8102","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8103","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2014-8103","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2436-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-8102","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-8103","description":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension.","status":"published","published":"2014-12-10T15:00:00Z","modified":"2024-08-06T13:10:50.01Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-7950","description":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension.","status":"published","published":"2014-12-10T15:00:00Z","modified":"2024-08-06T13:10:50Z","updated_at":"2026-11-03T01:56:52.951821Z"}],"ghsa":[{"id":"GHSA-cjgj-pfcg-8ccj","title":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote...","description":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension.","status":"published","published":"2022-05-17T03:11:04Z","modified":"2025-04-12T12:42:47Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:19.407948Z"}],"nvd":[{"id":"CVE-2014-8103","description":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension.","status":"published","published":"2014-12-10T15:59:15.753Z","modified":"2026-06-17T00:16:14.77Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"CVE-2014-8103","description":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension.","status":"published","published":"2014-12-10T15:59:15Z","modified":"2026-04-10T03:44:03.225795Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-8103","description":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension.","status":"published","published":"2014-12-10T15:59:15.753Z","modified":"2026-10-23T15:47:31.200950139Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"RHSA-2014:1983","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-15T22:14:06Z","modified":"2026-06-28T10:12:28Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"UBUNTU-CVE-2014-8103","description":"X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension.","status":"published","published":"2014-12-09T00:00:00Z","modified":"2026-04-22T09:51:55.010575Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2436-1","title":"xorg-server, xorg-server-lts-trusty vulnerabilities","description":"Ilja van Sprundel discovered a multitude of security issues in the X.Org X\nserver. An attacker able to connect to an X server, either locally or\nremotely, could use these issues to cause the X server to crash or execute\narbitrary code resulting in possible privilege escalation.\n","status":"published","published":"2014-12-09T18:36:18Z","modified":"2026-04-22T09:03:35.836492Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}