NVD

Id
35311  
Name
CVE-2014-8091  
Description
X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a crafted connection request.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-10  
Modified Date
2017-01-02  
Seq
2014-8091  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180787 35311 CVE-2014-8091 http://advisories.mageia.org/MGASA-2014-0532.html  View
180788 35311 CVE-2014-8091 61947  View
180789 35311 CVE-2014-8091 DSA-3095  View
180790 35311 CVE-2014-8091 MDVSA-2015:119  View
180791 35311 CVE-2014-8091 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
180792 35311 CVE-2014-8091 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
180793 35311 CVE-2014-8091 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
180794 35311 CVE-2014-8091 71597  View
180795 35311 CVE-2014-8091 http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/  View
180796 35311 CVE-2014-8091 GLSA-201504-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16991 JVNDB-2014-005866 X.Org X Window System および X.Org Server におけるサービス運用妨害 (DoS) の脆弱性 X.Org X Window System (別名 X11 および X) および X.Org Server (別名 xserver および xorg-server) は、SUN-DES-1 (Secure RPC) 認証資格を使用する際、malloc コールの戻り値をチェックしないため、サービス運用妨害 (NULL ポインタデリファレンスおよびサーバクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-8091 75384 CVE-2014-8091 35311 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005866.html 2014-12-09 2015-11-06 View