CVE

Id
75392  
CVE No.
CVE-2014-8091  
Status
Candidate  
Description
X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a crafted connection request.  
Phase
Assigned (20141010)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
699049 75392 CVE-2014-8091 CONFIRM:http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/  View
699050 75392 CVE-2014-8091 CONFIRM:http://advisories.mageia.org/MGASA-2014-0532.html  View
699051 75392 CVE-2014-8091 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
699052 75392 CVE-2014-8091 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
699053 75392 CVE-2014-8091 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
699054 75392 CVE-2014-8091 DEBIAN:DSA-3095  View
699055 75392 CVE-2014-8091 URL:http://www.debian.org/security/2014/dsa-3095  View
699056 75392 CVE-2014-8091 GENTOO:GLSA-201504-06  View
699057 75392 CVE-2014-8091 URL:https://security.gentoo.org/glsa/201504-06  View
699058 75392 CVE-2014-8091 MANDRIVA:MDVSA-2015:119  View
699059 75392 CVE-2014-8091 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:119  View
699060 75392 CVE-2014-8091 BID:71597  View
699061 75392 CVE-2014-8091 URL:http://www.securityfocus.com/bid/71597  View
699062 75392 CVE-2014-8091 SECUNIA:62292  View
699063 75392 CVE-2014-8091 URL:http://secunia.com/advisories/62292  View
699064 75392 CVE-2014-8091 SECUNIA:61947  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
17101 JVNDB-2014-005976 複数の X.Org 製品の XVideo エクステンションにおけるサービス運用妨害 (DoS) の脆弱性 XFree86、X.Org X Window System (別名 X11 または X)、および X.Org Server (別名 xserver および xorg-server) の XVideo エクステンションには、サービス運用妨害 (out-of-bounds read および out-of-bounds write) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2014-8099 75392 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005976.html  View