CVE-2015-3164

The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:x.org:xorg-server:1.16.3:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.4:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.17.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.17.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.99.901:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.99.902:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.1.901:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.2.901:*:*:*:*:*:*:*

Information

Published : 2015-07-01 07:59

Updated : 2018-10-30 09:27


NVD link : CVE-2015-3164

Mitre link : CVE-2015-3164


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

x.org

  • xorg-server

opensuse

  • opensuse