USN-2500-1: X.Org X server vulnerabilities
Olivier Fourdan discovered that the X.Org X server incorrectly handled XkbSetGeometry requests resulting in an information leak. An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly obtain sensitive information. (CVE-2015-0255) It was discovered that the X.Org X server incorrectly handled certain trapezoids. An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly crash the server. This issue only affected Ubuntu 12.04 LTS. (CVE-2013-6424)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
CVE-2015-0255
What is the severity of CVE-2015-0255?
The severity of CVE-2015-0255 is not provided in the information.
How can an attacker exploit CVE-2015-0255?
An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly obtain sensitive information.
Which software versions are affected by this vulnerability?
The vulnerability affects Ubuntu 14.10, Ubuntu 14.04, Ubuntu 12.04.
How to fix CVE-2015-0255?
Update the affected software by following the remediation steps provided by Ubuntu.