vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2014-8094

N/A
Published: December 10, 2014 at 03:00 PM UTC
Updated: June 17, 2026 at 12:16 AM UTC
3 products affected across 3 vendorsDebian LinuxSolarisX server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 4%

Description

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux· Debiandrupal
95%
7.0
Solaris· Oraclerubygems
95%
1011.2
X server· X Org
95%
1.10.01.10.0.9011.10.0.9021.10.11.10.1.9011.10.1.9021.10.21.10.2.9011.10.2.9021.10.31.10.3.9011.10.3.9021.10.41.10.61.10.99.9011.10.99.9021.11.01.11.11.11.1.9011.11.1.9021.11.21.11.2.9011.11.2.9021.11.31.11.3.9011.11.3.9021.11.41.11.99.11.11.99.21.11.99.9011.11.99.9021.11.99.9031.12.01.12.0.9011.12.0.9021.12.1.9011.12.1.9021.12.21.12.2.9011.12.2.9021.12.31.12.3.9011.12.3.9021.12.41.12.99.9011.12.99.9021.12.99.9031.12.99.9041.12.99.9051.13.01.13.0.9011.13.0.9021.13.11.13.1.9011.13.21.13.2.9011.13.2.9021.13.31.13.41.13.99.9011.13.99.9021.14.01.14.11.14.1.9011.14.1.9021.14.21.14.2 rc11.14.2.9011.14.2.9021.14.31.14.3.9011.14.3.901 rc11.14.41.14.4.9011.14.51.14.5.9011.14.61.14.71.14.99.11.14.99.21.14.99.31.14.99.9011.14.99.9021.14.99.9031.14.99.9041.14.99.9051.15.01.15.0.9011.15.11.15.21.15.99.9011.15.99.9021.15.99.9031.15.99.9041.16.01.16.0.9011.16.11.16.1.9011.16.21.16.2.9011.16.2.99.9011.7.01.7.0.9011.7.0.9021.7.11.7.1.9011.7.1.9021.7.21.7.2.9011.7.2.9021.7.31.7.3.9011.7.3.9021.7.41.7.4.9011.7.4.9021.7.51.7.5.9011.7.5.9021.7.61.7.6.9011.7.6.9021.7.71.7.99.11.7.99.21.7.99.9011.7.99.9021.8.01.8.0.9011.8.0.9021.8.11.8.1.9011.8.1.9021.8.21.8.2.9011.8.2.9021.8.99.9011.8.99.9021.8.99.9031.8.99.9041.8.99.9051.9.01.9.0.9011.9.0.9021.9.11.9.21.9.2.9011.9.2.9021.9.31.9.3.9011.9.3.9021.9.41.9.4.9011.9.51.9.99.9011.9.99.9021.9.99.903

References (9)

x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://advisories.mageia.org/MGASA-2014-0532.html
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/61947
Third Party Advisoryx_refsource_SECUNIAPermissions Required
Source: [email protected]
http://secunia.com/advisories/62292
Vendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
http://www.debian.org/security/2014/dsa-3095
Vendor Advisoryx_refsource_MANDRIVABroken Link
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2015:119
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/71601
x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/

CVSS

6.5MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-190

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card