CVE-2014-8101
Published: 9 December 2014
The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcRRQueryVersion, (2) SProcRRGetScreenInfo, (3) SProcRRSelectInput, or (4) SProcRRConfigureOutputProperty function.
Priority
Status
Package | Release | Status |
---|---|---|
xorg-server Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
precise |
Released
(2:1.11.4-0ubuntu10.15)
|
|
trusty |
Released
(2:1.15.1-0ubuntu2.4)
|
|
upstream |
Released
(2:1.16.2.901-1)
|
|
utopic |
Released
(2:1.16.0-1ubuntu1.1)
|
|
xorg-server-lts-trusty Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Released
(2:1.15.1-0ubuntu2~precise3)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
utopic |
Does not exist
|