X.Org X Server 'xkb/xkb.c' Information Disclosure Vulnerability
BID:72578
Info
X.Org X Server 'xkb/xkb.c' Information Disclosure Vulnerability
| Bugtraq ID: | 72578 |
| Class: | Design Error |
| CVE: |
CVE-2015-0255 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2015 12:00AM |
| Updated: | Aug 11 2015 08:02PM |
| Credit: | Olivier Fourdan |
| Vulnerable: |
X.org X11R7 1.1.1 X.org X11R7 1.0.2 X.org X11R7 1.0.1 X.org X11R7 1.0 X.org X11R7 7.5 X.org X11R7 7.3 X.org X11R7 7.2 X.org X11R7 7.1 X.org X11R7 7.0 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
X.Org X Server 'xkb/xkb.c' Information Disclosure Vulnerability
X.Org X Server is prone to an information-disclosure vulnerability that lets X clients read arbitrary X server memory.
Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
X.Org X Server is prone to an information-disclosure vulnerability that lets X clients read arbitrary X server memory.
Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
Exploit / POC
X.Org X Server 'xkb/xkb.c' Information Disclosure Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
X.Org X Server 'xkb/xkb.c' Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.