Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: 200710-16 High: X.Org Server Composite Local Escalation

gentoo
Calendar Grey October 15, 2007
Scroller Gentoo
Critical Gentoo alert regarding X.Org server's composite extension posing local privilege escalation risks. Immediate update suggested.
A vulnerability has been discovered in the Composite extension of the X.Org X server, allowing for a local privilege escalation.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200710-16
                                            https://security.gentoo.org/

  Severity: High
     Title: X.Org X server: Composite local privilege escalation
      Date: October 14, 2007
      Bugs: #191964
        ID: 200710-16


Synopsis
=======
A vulnerability has been discovered in the Composite extension of the
X.Org X server, allowing for a local privilege escalation.

Background
=========
The X Window System is a graphical windowing system based on a
client/server model.

Affected packages
================
    -------------------------------------------------------------------
     Package               /   Vulnerable   /               Unaffected
    -------------------------------------------------------------------
  1  x11-base/xorg-server     < 1.3.0.0-r1               >= 1.3.0.0-r1

==========
Aaron Plattner discovered a buffer overflow in the compNewPixmap()
fun...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity gentoo local escalation composite extension

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo local escalation composite extension

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround