CVE-2014-8093: Integer Overflow
Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) glXDispReadPixels, (2) glXDispSwapReadPixels, (3) glXDispGetTexImage, (4) glXDispSwapGetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) glXGetAnswerBuffer, (11) GLXGETANSWERBUFFER, (12) glXMap1dReqSize, (13) glXMap1fReqSize, (14) Map2Size, (15) glXMap2dReqSize, (16) glXMap2fReqSize, (17) glXImageSize, or (18) glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8093?
CVE-2014-8093 has a high severity rating due to the potential for denial of service and arbitrary code execution.
How do I fix CVE-2014-8093?
To fix CVE-2014-8093, update the affected software to versions 1.16.3 or later for xorg-server and versions above 4.0 for XFree86.
What are the affected systems by CVE-2014-8093?
CVE-2014-8093 affects XFree86 version 4.0, X.Org X11 version 6.7, and X.Org Server up to version 1.16.2.
What type of vulnerability is CVE-2014-8093?
CVE-2014-8093 is an integer overflow vulnerability in the GLX extension of the X Window System.
Can CVE-2014-8093 be exploited remotely?
Yes, CVE-2014-8093 can be exploited by remote authenticated users to cause crashes or execute arbitrary code.