CVE-2014-8103: Buffer Overflow

Published Dec 10, 2014

Updated

X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sprocdri3queryversion, (2) sprocdri3open, (3) sprocdri3pixmapfrombuffer, (4) sprocdri3bufferfrompixmap, (5) sprocdri3fencefromfd, (6) sprocdri3fdfromfence, (7) procpresentquerycapabilities, (8) sprocpresentqueryversion, (9) sprocpresentpixmap, (10) sprocpresentnotifymsc, (11) sprocpresentselectinput, or (12) sprocpresentquerycapabilities function in the (a) DRI3 or (b) Present extension.

Affected Software

30 affected components

X.Org xorg-server=1.15.0

X.Org xorg-server=1.15.0.901

X.Org xorg-server=1.15.1

X.Org xorg-server=1.15.2

X.Org xorg-server=1.15.99.901

X.Org xorg-server=1.15.99.902

X.Org xorg-server=1.15.99.903

X.Org xorg-server=1.15.99.904

X.Org xorg-server=1.16.0

X.Org xorg-server=1.16.0.901

X.Org xorg-server=1.16.1

X.Org xorg-server=1.16.1.901

X.Org xorg-server=1.16.2

X.Org xorg-server=1.16.2.99.901

X.Org xorg-server=1.16.2.901

X.Org X Server=1.15.0

X.Org X Server=1.15.0.901

X.Org X Server=1.15.1

X.Org X Server=1.15.2

X.Org X Server=1.15.99.901

X.Org X Server=1.15.99.902

X.Org X Server=1.15.99.903

X.Org X Server=1.15.99.904

X.Org X Server=1.16.0

X.Org X Server=1.16.0.901

X.Org X Server=1.16.1

X.Org X Server=1.16.1.901

X.Org X Server=1.16.2

X.Org X Server=1.16.2.99.901

X.Org X Server=1.16.2.901

Remediation

Patch Available

http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/

Event History

Dec 10, 2014

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-8103?

CVE-2014-8103 has been classified as a medium severity vulnerability due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2014-8103?

To mitigate CVE-2014-8103, you should upgrade the X.Org Server to version 1.16.3 or later.

Which versions of X.Org Server are affected by CVE-2014-8103?

CVE-2014-8103 affects X.Org Server versions 1.15.0 through 1.16.2, including various minor versions.

What type of vulnerability is CVE-2014-8103?

CVE-2014-8103 is a denial of service vulnerability that can lead to out-of-bounds read or write operations.

Can CVE-2014-8103 be exploited by remote attackers?

Yes, CVE-2014-8103 can be exploited by remote authenticated users to cause a denial of service.