GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Sun Oct 29, 2017 8:26 pm Post subject: [ GLSA 201710-30 ] X.Org Server |
|
|
Gentoo Linux Security Advisory
Title: X.Org Server: Multiple vulnerabilities (GLSA 201710-30)
Severity: normal
Exploitable: local
Date: 2017-10-29
Bug(s): #493294, #611350, #633910
ID: 201710-30
Synopsis
Multiple vulnerabilities have been found in X.Org Server the worst
of which could allow a local attacker to replace shared memory segments.
Background
The X.Org project provides an open source implementation of the X Window
System.
Affected Packages
Package: x11-base/xorg-server
Vulnerable: < 1.19.4
Unaffected: >= 1.19.4
Architectures: All supported architectures
Description
Multiple vulnerabilities have been discovered in X.Org Server. Please
review the referenced CVE identifiers for details.
Impact
A local attacker could cause a global buffer overflow or a Denial of
Service condition.
Workaround
There is no known workaround at this time
Resolution
All X.Org Server users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-server-1.19.4"
|
References
CVE-2013-6424
CVE-2017-13721
CVE-2017-13723
CVE-2017-2624
Last edited by GLSA on Mon Jan 15, 2018 4:16 am; edited 1 time in total |
|