GCVE - cpe:2.3:a:x.org:x11:6.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:x11:6.7:*:*:*:*:*:*:*

part: a version: 6.7 update: *

Vendor	X.Org (`4cd053ee-09df-594a-873d-dbd09ec2f899`)
Product	X11 (`99347006-68b7-5263-9a5d-656919e82cd3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-8101`	vulnerable	2026-06-03 14:34:22.668721	Details available The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcRRQueryVersion, (2) SProcRRGetScreenInfo, (3) SProcRRSelectInput, or (4) SProcRRConfigureOutputProperty function. Published: 2014-12-10T15:00:00.000Z Updated: 2024-08-06T13:10:50.426Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3095 http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://advisories.mageia.org/MGASA-2014-0532.html https://security.gentoo.org/glsa/201504-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8100`	vulnerable	2026-06-03 14:34:22.667097	Details available The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) ProcRenderQueryVersion, (2) SProcRenderQueryVersion, (3) SProcRenderQueryPictFormats, (4) SProcRenderQueryPictIndexValues, (5) SProcRenderCreatePicture, (6) SProcRenderChangePicture, (7) SProcRenderSetPictureClipRectangles, (8) SProcRenderFreePicture, (9) SProcRenderComposite, (10) SProcRenderScale, (11) SProcRenderCreateGlyphSet, (12) SProcRenderReferenceGlyphSet, (13) SProcRenderFreeGlyphSet, (14) SProcRenderFreeGlyphs, or (15) SProcRenderCompositeGlyphs function. Published: 2014-12-10T15:00:00.000Z Updated: 2024-08-06T13:10:50.327Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3095 http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://advisories.mageia.org/MGASA-2014-0532.html http://www.securityfocus.com/bid/71602	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8099`	vulnerable	2026-06-03 14:34:22.664563	Details available The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function. Published: 2014-12-10T15:00:00.000Z Updated: 2024-08-06T13:10:50.793Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3095 http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ http://advisories.mageia.org/MGASA-2014-0532.html https://security.gentoo.org/glsa/201504-06 http://secunia.com/advisories/62292	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8098`	vulnerable	2026-06-03 14:34:22.664084	Details available The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) __glXDisp_Render, (2) __glXDisp_RenderLarge, (3) __glXDispSwap_VendorPrivate, (4) __glXDispSwap_VendorPrivateWithReply, (5) set_client_info, (6) __glXDispSwap_SetClientInfoARB, (7) DoSwapInterval, (8) DoGetProgramString, (9) DoGetString, (10) __glXDispSwap_RenderMode, (11) __glXDisp_GetCompressedTexImage, (12) __glXDispSwap_GetCompressedTexImage, (13) __glXDisp_FeedbackBuffer, (14) __glXDispSwap_FeedbackBuffer, (15) __glXDisp_SelectBuffer, (16) __glXDispSwap_SelectBuffer, (17) __glXDisp_Flush, (18) __glXDispSwap_Flush, (19) __glXDisp_Finish, (20) __glXDispSwap_Finish, (21) __glXDisp_ReadPixels, (22) __glXDispSwap_ReadPixels, (23) __glXDisp_GetTexImage, (24) __glXDispSwap_GetTexImage, (25) __glXDisp_GetPolygonStipple, (26) __glXDispSwap_GetPolygonStipple, (27) __glXDisp_GetSeparableFilter, (28) __glXDisp_GetSeparableFilterEXT, (29) __glXDisp_GetConvolutionFilter, (30) __glXDisp_GetConvolutionFilterEXT, (31) __glXDisp_GetHistogram, (32) __glXDisp_GetHistogramEXT, (33) __glXDisp_GetMinmax, (34) __glXDisp_GetMinmaxEXT, (35) __glXDisp_GetColorTable, (36) __glXDisp_GetColorTableSGI, (37) GetSeparableFilter, (38) GetConvolutionFilter, (39) GetHistogram, (40) GetMinmax, or (41) GetColorTable function. Published: 2014-12-10T15:00:00.000Z Updated: 2024-08-06T13:10:49.953Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3095 http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://nvidia.custhelp.com/app/answers/detail/a_id/3610 http://advisories.mageia.org/MGASA-2014-0532.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8093`	vulnerable	2026-06-03 14:34:22.494995	Details available Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write. Published: 2014-12-10T15:00:00.000Z Updated: 2024-08-06T13:10:50.027Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3095 http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://nvidia.custhelp.com/app/answers/detail/a_id/3610 http://advisories.mageia.org/MGASA-2014-0532.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7439`	vulnerable	2026-06-03 14:33:35.772213	Details available Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow. Published: 2015-04-16T14:00:00.000Z Updated: 2024-08-06T18:09:16.255Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2568-1 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html http://www.securityfocus.com/bid/73962 http://www.debian.org/security/2015/dsa-3224 http://seclists.org/oss-sec/2015/q2/81	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.