VDB

GCVE-110-MAGEIA-2015-73

GCVE-110-MAGEIA-2015-73
Advisory Published
Vulnetix · Advisory published February 17, 2015
Updated x11-server packages fix security vulnerability: Olivier Fourdan from Red Hat has discovered a protocol handling issue in the way the X server code base handles the XkbSetGeometry request, where the server trusts the client to send valid string lengths. A malicious client with string lengths exceeding the request length can cause the server to copy adjacent memory data into the XKB structs. This data is then available to the client via the XkbGetGeometry request. This can lead to information disclosure issues, as well as possibly a denial of service if a similar request can cause the server to crash (CVE-2015-0255).

Affected Products

VendorProductVersionsPlatforms
Mageiagrfcodec0 (affected), 6.0.5-1.mga5 (unaffected)
Mageiax11-server0 (affected), 1.14.5-2.3.mga4 (unaffected), 0 (affected), 1.14.5-2.3.mga4 (unaffected)
Mageiaopenttd0 (affected), 1.5.1-1.mga5 (unaffected)

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›