CVE-2014-8091

Publication date 9 December 2014

Last updated 24 July 2024

Ubuntu priority

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a crafted connection request.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
nvidia-graphics-drivers-304	14.10 utopic	Fixed 304.125-0ubuntu0.1
	14.04 LTS trusty	Fixed 304.125-0ubuntu0.0.1
	12.04 LTS precise	Fixed 304.125-0ubuntu0.0.0.1
	10.04 LTS lucid	Not in release
nvidia-graphics-drivers-304-updates	14.10 utopic	Fixed 304.125-0ubuntu0.1
	14.04 LTS trusty	Fixed 304.125-0ubuntu0.0.1
	12.04 LTS precise	Fixed 304.125-0ubuntu0.0.0.1
	10.04 LTS lucid	Not in release
nvidia-graphics-drivers-331	14.10 utopic	Fixed 331.113-0ubuntu0.1
	14.04 LTS trusty	Fixed 331.113-0ubuntu0.0.4
	12.04 LTS precise	Fixed 331.113-0ubuntu0.0.0.3
	10.04 LTS lucid	Not in release
nvidia-graphics-drivers-331-updates	14.10 utopic	Fixed 331.113-0ubuntu0.1
	14.04 LTS trusty	Fixed 331.113-0ubuntu0.0.4
	12.04 LTS precise	Fixed 331.113-0ubuntu0.0.0.3
	10.04 LTS lucid	Not in release
xorg-server	14.10 utopic	Fixed 2:1.16.0-1ubuntu1.1
	14.04 LTS trusty	Fixed 2:1.15.1-0ubuntu2.4
	12.04 LTS precise	Fixed 2:1.11.4-0ubuntu10.15
	10.04 LTS lucid	Ignored end of life
xorg-server-lts-trusty	14.10 utopic	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Fixed 2:1.15.1-0ubuntu2~precise3
	10.04 LTS lucid	Not in release

CVE-2014-8091

Status

References

Related Ubuntu Security Notices (USN)

Other references