CVE-2014-8101: Buffer Overflow
The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcRRQueryVersion, (2) SProcRRGetScreenInfo, (3) SProcRRSelectInput, or (4) SProcRRConfigureOutputProperty function.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8101?
CVE-2014-8101 is classified as a moderate severity vulnerability that can lead to denial of service or potential remote code execution.
How do I fix CVE-2014-8101?
To mitigate CVE-2014-8101, update to XFree86 version 4.2.1 or later, or X.Org Server version 1.16.3 or later.
What types of systems are affected by CVE-2014-8101?
CVE-2014-8101 affects systems using XFree86 4.2.0, X.Org Server versions below 1.16.3, and X11R6.7.
Can CVE-2014-8101 be exploited remotely?
Yes, CVE-2014-8101 can be exploited by remote authenticated users to trigger denial of service or execute arbitrary code.
What is the impact of CVE-2014-8101?
The impact of CVE-2014-8101 includes potential data breaches and system stability issues due to out-of-bounds reads or writes.