NetSight
IP …
medium6.4

CVE-2015-0255

X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory o…

Impact

X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.

Affected products

VendorProductAffected versions
X.OrgX Server
through 1.16.3
Version 1.17.0
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-200

References