{"id":"CVE-2015-0255","aliases":["DEBIAN-CVE-2015-0255","DLA-218-1","DSA-3160-1","EUVD-2015-0275","GHSA-qf46-p69c-vqm4","MGASA-2015-0073","RHSA-2015:0797","SUSE-SU-2015:0398-1","SUSE-SU-2015:0399-1","SUSE-SU-2015:0400-1","SUSE-SU-2015:0401-1","SUSE-SU-2015:0402-1","SUSE-SU-2015:0403-1","SUSE-SU-2015:0427-1","SUSE-SU-2015:0939-1","SUSE-SU-2015:1025-1","UBUNTU-CVE-2015-0255","USN-2500-1","USN-4772-1","openSUSE-SU-2024:10056-1"],"status":"published","title":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote...","description":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04326,"percentile":0.91245,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-06-27T12:01:01Z","modified":"2026-09-09T06:47:29Z","fixes":[{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:1.16.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:1.16.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:1.16.4-1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"xorg-server","fixed_in":["2:1.7.7-18+deb6u2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"xorg-server","fixed_in":["2:1.12.4-6+deb7u6"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"x11-server","fixed_in":["1.14.5-2.3.mga4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","fixed_in":["0:1.15.0-26.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xorg","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-common","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xnest","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-devel","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-source","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xnest","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xorg","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-common","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-devel","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-source","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xorg","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-common","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xnest","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-devel","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-source","fixed_in":["0:1.15.0-33.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xorg","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-common","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xnest","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-devel","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-source","fixed_in":["0:1.15.0-33.el7_1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"xorg-x11-server","fixed_in":["7.6_1.15.2-21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"xorg-x11-server","fixed_in":["7.6_1.15.2-21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"xorg-x11-server","fixed_in":["7.6_1.15.2-21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"xorg-x11-server","fixed_in":["7.6_1.15.2-21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"fltk","fixed_in":["1.3.2-10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"tigervnc","fixed_in":["1.4.1-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"fltk","fixed_in":["1.3.2-10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"fltk","fixed_in":["1.3.2-10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"tigervnc","fixed_in":["1.4.1-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"fltk","fixed_in":["1.3.2-10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"tigervnc","fixed_in":["1.4.1-32.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","fixed_in":["2:1.15.1-0ubuntu2.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server-lts-utopic","fixed_in":["2:1.16.0-1ubuntu1.2~trusty2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vnc4","fixed_in":["4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vnc4","fixed_in":["4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.4-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.7-18+deb6u2"}]}],"versions":["2:1.7.7-11","2:1.7.7-12","2:1.7.7-13","2:1.7.7-14","2:1.7.7-15","2:1.7.7-16","2:1.7.7-17","2:1.7.7-18"]},{"source":"osv","ecosystem":"Debian:7","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.4-6+deb7u6"}]}],"versions":["2:1.12.4-6","2:1.12.4-6+deb7u1","2:1.12.4-6+deb7u2","2:1.12.4-6+deb7u3","2:1.12.4-6+deb7u4","2:1.12.4-6+deb7u5"]},{"source":"osv","ecosystem":"Mageia:4","package":"x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-2.3.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-26.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-33.el7_1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6_1.15.2-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"fltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"fltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"fltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"fltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-32.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.7"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1","2:1.15.1-0ubuntu2.4","2:1.15.1-0ubuntu2.5","2:1.15.1-0ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.0-1ubuntu1.2~trusty2"}]}],"versions":["2:1.16.0-1ubuntu1.2~trusty1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vnc4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1"}]}],"versions":["4.1.1+xorg4.3.0-37ubuntu5","4.1.1+xorg4.3.0-37ubuntu5.0.1","4.1.1+xorg4.3.0-37ubuntu5.0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vnc4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1"}]}],"versions":["4.1.1+xorg4.3.0-37.3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vnc4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.1+xorg4.3.0-37.3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.7"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1","2:1.15.1-0ubuntu2.4","2:1.15.1-0ubuntu2.5","2:1.15.1-0ubuntu2.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.0-1ubuntu1.2~trusty2"}]}],"versions":["2:1.16.0-1ubuntu1.2~trusty1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vnc4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1"}]}],"versions":["4.1.1+xorg4.3.0-37ubuntu5","4.1.1+xorg4.3.0-37ubuntu5.0.1","4.1.1+xorg4.3.0-37ubuntu5.0.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vnc4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1"}]}],"versions":["4.1.1+xorg4.3.0-37.3ubuntu2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-2.1"}]}],"bundled":3}],"products":[{"vendor":"opensuse","product":"opensuse"},{"vendor":"x.org","product":"x_server"}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00085.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201504-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://advisories.mageia.org/MGASA-2015-0073.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/72578","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:119","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3160","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2500-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2015-02-10/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","web","article"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00086.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0797.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0255","tags":["advisory"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2015-02-10"},{"url":"https://github.com/advisories/GHSA-qf46-p69c-vqm4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-0255","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0073.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15265","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0797","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1189062","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0797.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0255","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150398-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/915810","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0255","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150399-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150400-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150401-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150402-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150403-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150427-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/816813","tags":["report"]},{"url":"https://bugzilla.suse.com/843652","tags":["report"]},{"url":"https://bugzilla.suse.com/853846","tags":["report"]},{"url":"https://bugzilla.suse.com/864911","tags":["report"]},{"url":"https://bugzilla.suse.com/874903","tags":["report"]},{"url":"https://bugzilla.suse.com/878433","tags":["report"]},{"url":"https://bugzilla.suse.com/878446","tags":["report"]},{"url":"https://bugzilla.suse.com/879019","tags":["report"]},{"url":"https://bugzilla.suse.com/880745","tags":["report"]},{"url":"https://bugzilla.suse.com/880835","tags":["report"]},{"url":"https://bugzilla.suse.com/883051","tags":["report"]},{"url":"https://bugzilla.suse.com/883516","tags":["report"]},{"url":"https://bugzilla.suse.com/883598","tags":["report"]},{"url":"https://bugzilla.suse.com/886213","tags":["report"]},{"url":"https://bugzilla.suse.com/907268","tags":["report"]},{"url":"https://bugzilla.suse.com/907633","tags":["report"]},{"url":"https://bugzilla.suse.com/928520","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3418","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150939-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/908738","tags":["report"]},{"url":"https://bugzilla.suse.com/911577","tags":["report"]},{"url":"https://bugzilla.suse.com/915782","tags":["report"]},{"url":"https://bugzilla.suse.com/920969","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151025-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0255","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/02/10/18","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2500-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4772-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-6424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1283","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8240","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-0255","description":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.","status":"published","published":"2015-02-13T15:00:00Z","modified":"2024-08-06T04:03:10.448Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0275","description":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.","status":"published","published":"2015-02-13T15:00:00Z","modified":"2024-08-06T04:03:10Z","updated_at":"2026-11-03T02:22:20.481932Z"}],"ghsa":[{"id":"GHSA-qf46-p69c-vqm4","title":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote...","description":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.","status":"published","published":"2022-05-14T02:06:21Z","modified":"2025-04-12T12:46:22Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:20.846668Z"}],"nvd":[{"id":"CVE-2015-0255","description":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.","status":"published","published":"2015-02-13T15:59:09.367Z","modified":"2026-06-17T00:19:50.377Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:01.643178Z"}],"osv":[{"id":"CVE-2015-0255","description":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.","status":"published","published":"2015-02-13T15:59:09Z","modified":"2026-04-16T06:20:01.298347947Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-0255","description":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.","status":"published","published":"2015-02-13T15:59:09.367Z","modified":"2026-09-09T06:47:29.977117035Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-218-1","title":"xorg-server - security update","status":"published","published":"2015-05-01T00:00:00Z","modified":"2026-03-09T01:21:32.06333Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3160-1","title":"xorg-server - security update","status":"published","published":"2015-02-11T00:00:00Z","modified":"2026-03-09T01:20:52.025236Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0073","title":"Updated x11-server packages fix CVE-2015-0255","description":"Updated x11-server packages fix security vulnerability:\n\nOlivier Fourdan from Red Hat has discovered a protocol handling issue in\nthe way the X server code base handles the XkbSetGeometry request, where\nthe server trusts the client to send valid string lengths. A malicious\nclient with string lengths exceeding the request length can cause the server\nto copy adjacent memory data into the XKB structs. This data is then\navailable to the client via the XkbGetGeometry request. This can lead to\ninformation disclosure issues, as well as possibly a denial of service if a\nsimilar request can cause the server to crash (CVE-2015-0255).\n","status":"published","published":"2015-02-17T18:38:13Z","modified":"2026-04-16T06:24:11.437348413Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10056-1","title":"libXvnc-devel-1.7.0-2.1 on GA media","description":"These are all security issues fixed in the libXvnc-devel-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:28:32.863711Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:0797","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-15T22:28:37Z","modified":"2026-06-26T12:20:58.949237128Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0398-1","title":"Security update for xorg-x11-server","description":"xorg-x11-server was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-0255: Check string lenghts in XkbSetGeometry request (bnc#915810)\n","status":"published","published":"2015-02-10T08:46:59Z","modified":"2026-02-04T02:33:00.923937Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0399-1","title":"Security update for xorg-x11-server","description":"xorg-x11-server was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-0255: Check string lenghts in XkbSetGeometry request (bnc#915810)\n","status":"published","published":"2015-02-10T08:46:59Z","modified":"2026-02-04T04:26:48.756812Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0400-1","title":"Security update for xorg-x11-server","description":"xorg-x11-server was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-0255: Check string lenghts in XkbSetGeometry request (bnc#915810)\n","status":"published","published":"2015-02-10T08:46:59Z","modified":"2026-02-04T03:15:30.868873Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0401-1","title":"Security update for xorg-x11-server","description":"xorg-x11-server was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-0255: Check string lenghts in XkbSetGeometry request (bnc#915810)\n","status":"published","published":"2015-02-10T08:46:59Z","modified":"2026-02-04T03:52:35.423155Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0402-1","title":"Security update for xorg-x11-server","description":"xorg-x11-server was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-0255: Check string lenghts in XkbSetGeometry request (bnc#915810)\n","status":"published","published":"2015-02-10T08:46:59Z","modified":"2026-02-04T03:42:37.560152Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0403-1","title":"Security update for xorg-x11-server","description":"xorg-x11-server was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-0255: Check string lenghts in XkbSetGeometry request (bnc#915810)\n","status":"published","published":"2015-02-10T08:46:59Z","modified":"2026-02-04T04:10:45.765466Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0427-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:12:31.989382Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0939-1","title":"Security update for tigervnc, fltk","description":"tigervnc and fltk were updated to fix security issues and non-security bugs.\n\nThis security issue was fixed:\n- CVE-2015-0255: Information leak in the XkbSetGeometry request of X servers (bnc#915810).\n\nThese non-security issues were fixed:\n- vncviewer-tigervnc does not display mouse cursor shape changes (bnc#908738).\n- vnc module for Xorg fails to load on startup, module mismatch (bnc#911577).\n- An Xvnc session may become unusable when user logs out (bnc#920969)\n\nfltk was updated to fix one non-security issue:\n- vncviewer-tigervnc does not display mouse cursor shape changes (bnc#908738).\n\nAdditionally tigervnc was updated to 1.4.1, the contained X server was updated to to 1.15.2.\n","status":"published","published":"2015-05-19T16:58:01Z","modified":"2026-02-04T03:47:47.298737Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1025-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:55:40.562616Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2015-0255","description":"X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.","status":"published","published":"2015-02-11T00:00:00Z","modified":"2026-04-22T10:00:21.877538Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2500-1","title":"xorg-server, xorg-server-lts-trusty, xorg-server-lts-utopic vulnerabilities","description":"Olivier Fourdan discovered that the X.Org X server incorrectly handled\nXkbSetGeometry requests resulting in an information leak. An attacker able\nto connect to an X server, either locally or remotely, could use this issue\nto possibly obtain sensitive information. (CVE-2015-0255)\n\nIt was discovered that the X.Org X server incorrectly handled certain\ntrapezoids. An attacker able to connect to an X server, either locally or\nremotely, could use this issue to possibly crash the server. This issue\nonly affected Ubuntu 12.04 LTS. (CVE-2013-6424)\n","status":"published","published":"2015-02-17T12:26:40Z","modified":"2026-04-27T15:17:30.204365542Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-4772-1","title":"vnc4 vulnerabilities","description":"\nUSN-2500-1 addressed CVE-2015-0255 for xorg-server. This update provides\nthe corresponding fix for VNC4 on Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n(CVE-2015-0255)\n\nUSN-2726-1 addressed CVE-2015-1283 for Expat. This update provides the\ncorresponding fix for VNC4 on Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n(CVE-2015-1283)\n\nOriginal advisory details:\n\n Olivier Fourdan discovered that the X.Org X server incorrectly handled\n XkbSetGeometry requests resulting in an information leak. An attacker able\n to connect to an X server, either locally or remotely, could use this issue\n to possibly obtain sensitive information. (CVE-2015-0255)\n\n It was discovered that Expat incorrectly handled malformed XML data. If a\n user or application linked against Expat were tricked into opening a\n crafted XML file, an attacker could cause a denial of service, or possibly\n execute arbitrary code. (CVE-2015-1283)\n","status":"published","published":"2021-03-15T20:16:26Z","modified":"2026-06-29T13:48:13.615662485Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}