CVE-2015-9262
libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media), Red Hat (baja), Amazon (baja), Oracle (baja).
Descripción
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | libXcursor, libXcursor-debuginfo, libXcursor-devel | 1.1.14-2.1.10.amzn1 |
| amazon linux 2 | libXcursor, libXcursor-debuginfo, libXcursor-devel | 1.1.15-1.amzn2 |
| debian 11 | libxcursor | 1:1.1.15-1 |
| debian 12 | libxcursor | 1:1.1.15-1 |
| debian 13 | libxcursor | 1:1.1.15-1 |
| debian 14 | libxcursor | 1:1.1.15-1 |
| debian 8 | libxcursor | 1:1.1.14-1+deb8u2 |
| debian 9 | libxcursor | 1:1.1.14-1+deb9u2 |
| echo | libxcursor | 1:1.1.15-1 |
| Oracle Linux 7 | drm-utils, egl-utils, freeglut y 106 más | 2.4.91-3.el7 y 38 más |
| Red Hat | libXcursor, libXcursor-devel | sin corrección indicada |
| seal Red Hat 6 | libx11, seal-libx11 | 1.6.4-4.el6_10+sp999 |
Mostrar las 129 entradas de 15 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | libXcursor | 1.1.14-2.1.10.amzn1 |
| amazon linux 1 | libXcursor-debuginfo | 1.1.14-2.1.10.amzn1 |
| amazon linux 1 | libXcursor-devel | 1.1.14-2.1.10.amzn1 |
| amazon linux 2 | libXcursor | 1.1.15-1.amzn2 |
| amazon linux 2 | libXcursor-debuginfo | 1.1.15-1.amzn2 |
| amazon linux 2 | libXcursor-devel | 1.1.15-1.amzn2 |
| debian 11 | libxcursor | 1:1.1.15-1 |
| debian 12 | libxcursor | 1:1.1.15-1 |
| debian 13 | libxcursor | 1:1.1.15-1 |
| debian 14 | libxcursor | 1:1.1.15-1 |
| debian 8 | libxcursor | 1:1.1.14-1+deb8u2 |
| debian 9 | libxcursor | 1:1.1.14-1+deb9u2 |
| echo | libxcursor | 1:1.1.15-1 |
| Oracle Linux 7 | drm-utils | 2.4.91-3.el7 |
| Oracle Linux 7 | egl-utils | 8.3.0-10.el7 |
| Oracle Linux 7 | freeglut | 3.0.0-8.el7 |
| Oracle Linux 7 | freeglut-devel | 3.0.0-8.el7 |
| Oracle Linux 7 | glx-utils | 8.3.0-10.el7 |
| Oracle Linux 7 | intel-gpu-tools | 2.99.917-28.20180530.el7 |
| Oracle Linux 7 | libX11 | 1.6.5-2.el7 |
| Oracle Linux 7 | libX11-common | 1.6.5-2.el7 |
| Oracle Linux 7 | libX11-devel | 1.6.5-2.el7 |
| Oracle Linux 7 | libXcursor | 1.1.15-1.el7 |
| Oracle Linux 7 | libXcursor-devel | 1.1.15-1.el7 |
| Oracle Linux 7 | libXfont | 1.5.4-1.el7 |
| Oracle Linux 7 | libXfont-devel | 1.5.4-1.el7 |
| Oracle Linux 7 | libXfont2 | 2.0.3-1.el7 |
| Oracle Linux 7 | libXfont2-devel | 2.0.3-1.el7 |
| Oracle Linux 7 | libXres | 1.2.0-1.el7 |
| Oracle Linux 7 | libXres-devel | 1.2.0-1.el7 |
| Oracle Linux 7 | libdrm | 2.4.91-3.el7 |
| Oracle Linux 7 | libdrm-devel | 2.4.91-3.el7 |
| Oracle Linux 7 | libepoxy | 1.5.2-1.el7 |
| Oracle Linux 7 | libepoxy-devel | 1.5.2-1.el7 |
| Oracle Linux 7 | libglvnd | 1:1.0.1-0.8.git5baa1e5.el7 |
| Oracle Linux 7 | libglvnd-core-devel | 1:1.0.1-0.8.git5baa1e5.el7 |
| Oracle Linux 7 | libglvnd-devel | 1:1.0.1-0.8.git5baa1e5.el7 |
| Oracle Linux 7 | libglvnd-egl | 1:1.0.1-0.8.git5baa1e5.el7 |
| Oracle Linux 7 | libglvnd-gles | 1:1.0.1-0.8.git5baa1e5.el7 |
| Oracle Linux 7 | libglvnd-glx | 1:1.0.1-0.8.git5baa1e5.el7 |
| Oracle Linux 7 | libglvnd-opengl | 1:1.0.1-0.8.git5baa1e5.el7 |
| Oracle Linux 7 | libinput | 1.10.7-2.el7 |
| Oracle Linux 7 | libinput-devel | 1.10.7-2.el7 |
| Oracle Linux 7 | libwacom | 0.30-1.el7 |
| Oracle Linux 7 | libwacom-data | 0.30-1.el7 |
| Oracle Linux 7 | libwacom-devel | 0.30-1.el7 |
| Oracle Linux 7 | libxcb | 1.13-1.el7 |
| Oracle Linux 7 | libxcb-devel | 1.13-1.el7 |
| Oracle Linux 7 | libxcb-doc | 1.13-1.el7 |
| Oracle Linux 7 | mesa-demos | 8.3.0-10.el7 |
| Oracle Linux 7 | mesa-dri-drivers | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-filesystem | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libEGL | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libEGL-devel | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libGL | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libGL-devel | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libGLES | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libGLES-devel | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libOSMesa | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libOSMesa-devel | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libgbm | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libgbm-devel | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libglapi | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libwayland-egl | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libwayland-egl-devel | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libxatracker | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-libxatracker-devel | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-vdpau-drivers | 18.0.5-3.el7 |
| Oracle Linux 7 | mesa-vulkan-drivers | 18.0.5-3.el7 |
| Oracle Linux 7 | tigervnc | 1.8.0-13.el7 |
| Oracle Linux 7 | tigervnc-icons | 1.8.0-13.el7 |
| Oracle Linux 7 | tigervnc-license | 1.8.0-13.el7 |
| Oracle Linux 7 | tigervnc-server | 1.8.0-13.el7 |
| Oracle Linux 7 | tigervnc-server-applet | 1.8.0-13.el7 |
| Oracle Linux 7 | tigervnc-server-minimal | 1.8.0-13.el7 |
| Oracle Linux 7 | tigervnc-server-module | 1.8.0-13.el7 |
| Oracle Linux 7 | vulkan | 1.1.73.0-1.el7 |
| Oracle Linux 7 | vulkan-devel | 1.1.73.0-1.el7 |
| Oracle Linux 7 | vulkan-filesystem | 1.1.73.0-1.el7 |
| Oracle Linux 7 | xcb-proto | 1.13-1.el7 |
| Oracle Linux 7 | xkeyboard-config | 2.24-1.el7 |
| Oracle Linux 7 | xkeyboard-config-devel | 2.24-1.el7 |
| Oracle Linux 7 | xorg-x11-drv-ati | 18.0.1-1.el7 |
| Oracle Linux 7 | xorg-x11-drv-dummy | 0.3.7-1.el7.1 |
| Oracle Linux 7 | xorg-x11-drv-evdev | 2.10.6-1.el7 |
| Oracle Linux 7 | xorg-x11-drv-evdev-devel | 2.10.6-1.el7 |
| Oracle Linux 7 | xorg-x11-drv-fbdev | 0.5.0-1.el7 |
| Oracle Linux 7 | xorg-x11-drv-intel | 2.99.917-28.20180530.el7 |
| Oracle Linux 7 | xorg-x11-drv-intel-devel | 2.99.917-28.20180530.el7 |
| Oracle Linux 7 | xorg-x11-drv-libinput | 0.27.1-2.el7 |
| Oracle Linux 7 | xorg-x11-drv-libinput-devel | 0.27.1-2.el7 |
| Oracle Linux 7 | xorg-x11-drv-mouse | 1.9.2-2.el7 |
| Oracle Linux 7 | xorg-x11-drv-mouse-devel | 1.9.2-2.el7 |
| Oracle Linux 7 | xorg-x11-drv-nouveau | 1:1.0.15-1.el7 |
| Oracle Linux 7 | xorg-x11-drv-openchrome | 0.5.0-3.el7.1 |
| Oracle Linux 7 | xorg-x11-drv-openchrome-devel | 0.5.0-3.el7.1 |
| Oracle Linux 7 | xorg-x11-drv-qxl | 0.1.5-4.el7.1 |
| Oracle Linux 7 | xorg-x11-drv-synaptics | 1.9.0-2.el7 |
| Oracle Linux 7 | xorg-x11-drv-synaptics-devel | 1.9.0-2.el7 |
| Oracle Linux 7 | xorg-x11-drv-v4l | 0.2.0-49.el7 |
| Oracle Linux 7 | xorg-x11-drv-vesa | 2.4.0-1.el7 |
| Oracle Linux 7 | xorg-x11-drv-vmmouse | 13.1.0-1.el7.1 |
| Oracle Linux 7 | xorg-x11-drv-vmware | 13.2.1-1.el7.1 |
| Oracle Linux 7 | xorg-x11-drv-void | 1.4.1-2.el7.1 |
| Oracle Linux 7 | xorg-x11-drv-wacom | 0.36.1-1.el7 |
| Oracle Linux 7 | xorg-x11-drv-wacom-devel | 0.36.1-1.el7 |
| Oracle Linux 7 | xorg-x11-font-utils | 1:7.5-21.el7 |
| Oracle Linux 7 | xorg-x11-proto-devel | 2018.4-1.el7 |
| Oracle Linux 7 | xorg-x11-server-Xdmx | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-server-Xephyr | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-server-Xnest | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-server-Xorg | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-server-Xspice | 0.1.5-4.el7.1 |
| Oracle Linux 7 | xorg-x11-server-Xvfb | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-server-Xwayland | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-server-common | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-server-devel | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-server-source | 1.20.1-3.el7 |
| Oracle Linux 7 | xorg-x11-utils | 7.5-23.el7 |
| Oracle Linux 7 | xorg-x11-xkb-extras | 7.7-14.el7 |
| Oracle Linux 7 | xorg-x11-xkb-utils | 7.7-14.el7 |
| Oracle Linux 7 | xorg-x11-xkb-utils-devel | 7.7-14.el7 |
| Red Hat | libXcursor | sin corrección indicada |
| Red Hat | libXcursor-devel | sin corrección indicada |
| seal Red Hat 6 | libx11 | 1.6.4-4.el6_10+sp999 |
| seal Red Hat 6 | seal-libx11 | 1.6.4-4.el6_10+sp999 |
| ubuntu 14.04 | libxcursor | 1:1.1.14-1ubuntu0.14.04.2 |
| ubuntu 16.04 | libxcursor | 1:1.1.14-1ubuntu0.16.04.2 |
| ubuntu 16.04-ESM | libxcursor | 1:1.1.14-1ubuntu0.16.04.2 |
Referencias
- https://access.redhat.com/errata/RHSA-2018:3059
- https://access.redhat.com/errata/RHSA-2018:3505
- https://access.redhat.com/security/cve/CVE-2015-9262
- https://bugs.freedesktop.org/show_bug.cgi?id=90857
- https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=897213f36baf6926daf6d192c709cf627aa5fd05
- https://linux.oracle.com/cve/CVE-2015-9262.html
- https://linux.oracle.com/errata/ELSA-2018-3059.html
- https://lists.debian.org/debian-lts-announce/2018/08/msg00016.html