CVE-2014-8096: Buffer Overflow
The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8096?
CVE-2014-8096 is considered a critical vulnerability due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2014-8096?
To fix CVE-2014-8096, upgrade to X.Org Server version 1.16.3 or later.
Who is affected by CVE-2014-8096?
CVE-2014-8096 affects users of X.Org X Window System versions 6.0 and X.Org Server up to 1.16.2.99.901.
What kind of attacks can CVE-2014-8096 facilitate?
CVE-2014-8096 can facilitate remote authenticated attacks leading to denial of service or the execution of arbitrary code.
What systems are vulnerable due to CVE-2014-8096?
Vulnerable systems include Debian Linux versions 7.1 and 8.0, along with X.Org X11 version 6.0.