Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Gentoo: GLSA-202310-15 Critical: X.Org X Server Security Vulnerability

gentoo
Calendar Grey May 15, 2014
Scroller Gentoo
Numerous security flaws in X.Org X Server may lead to arbitrary code execution or denial of service. Gentoo users are advised to apply updates promptly.
Multiple vulnerabilities have been found in X.Org X Server, allowing attackers to execute arbitrary code or cause a Denial of Service condition

Summary

Multiple vulnerabilities have been discovered in X.Org X Server. Please review the CVE identifiers referenced below for details.

Topics%20covered

Topics Covered

security advisory denial of service high severity gentoo code execution

Resolution

All X.Org X Server users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=x11-base/xorg-server-1.14.3-r2"

References

[ 1 ] CVE-2013-1056 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1056 [ 2 ] CVE-2013-1940 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1940 [ 3 ] CVE-2013-1981 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1981 [ 4 ] CVE-2013-1982 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1982 [ 5 ] CVE-2013-1983 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1983 [ 6 ] CVE-2013-1984 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1984 [ 7 ] CVE-2013-1985 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1985 [ 8 ] CVE-2013-1986 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1986 [ 9 ] CVE-2013-1987 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1987 [ 10 ] CVE-2013-1988 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1988 [ 11 ] CVE-2013-1989 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1989 [ 12 ] CVE-2013-1990 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1990 [ 13 ] CVE-2013-1991 http://nvd.nist.gov/nvd.cfm?cvena...

Read the Full Advisory

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201405-07
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity
critical
Lowest
Low
Medium
High
Critical

Severity: High
Title: X.Org X Server: Multiple vulnerabilities
Date: May 15, 2014
Bugs: #466222, #471098, #487360, #497836
ID: 201405-07

Topics%20covered

Topics Covered

security advisory denial of service high severity gentoo code execution

Synopsis

Multiple vulnerabilities have been found in X.Org X Server, allowing attackers to execute arbitrary code or cause a Denial of Service condition.

Background

The X Window System is a graphical windowing system based on a client/server model.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 x11-base/xorg-server < 1.14.3-r2 >= 1.14.3-r2

Impact

===== A context-dependent attacker could execute arbitrary code with the privileges of the process, cause a Denial of Service condition, or obtain sensitive information.

Workaround

There is no known workaround at this time.