CVE-2015-3164

The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
Configurations

Configuration 1 (hide)

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:x.org:xorg-server:1.16.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.1.901:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.2.901:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.3:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.4:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.99.901:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.16.99.902:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.17.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.17.1:*:*:*:*:*:*:*

History

21 Nov 2024, 02:28

Type Values Removed Values Added
References () http://lists.freedesktop.org/archives/wayland-devel/2015-June/022548.html - Vendor Advisory () http://lists.freedesktop.org/archives/wayland-devel/2015-June/022548.html - Vendor Advisory
References () http://lists.opensuse.org/opensuse-updates/2015-06/msg00044.html - () http://lists.opensuse.org/opensuse-updates/2015-06/msg00044.html -
References () http://www.securityfocus.com/bid/75535 - () http://www.securityfocus.com/bid/75535 -
References () https://security.gentoo.org/glsa/201701-64 - () https://security.gentoo.org/glsa/201701-64 -

Information

Published : 2015-07-01 14:59

Updated : 2024-11-21 02:28


NVD link : CVE-2015-3164

Mitre link : CVE-2015-3164

CVE.ORG link : CVE-2015-3164


JSON object : View

Products Affected

x.org

  • xorg-server

opensuse

  • opensuse
CWE
CWE-264

Permissions, Privileges, and Access Controls