CVE-2015-9262 _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
CriticalCVSS 9.8
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libxcursor(Debian:12) | < 1:1.1.15-1 | 1:1.1.15-1 |
| debian/libxcursor(Debian:13) | < 1:1.1.15-1 | 1:1.1.15-1 |
| debian/libxcursor(Debian:14) | < 1:1.1.15-1 | 1:1.1.15-1 |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| x libxcursor | < 1.1.15 | 1.1.15 |
| redhat ansible tower | = 3.3 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-9262 vendor-advisory
- RHSA-2018:3059 third-party-advisory vendor-advisory
- RHSA-2018:3505 third-party-advisory vendor-advisory
- bugs.freedesktop.org patch third-party-advisory
- cgit.freedesktop.org patch third-party-advisory
- [debian-lts-announce] 20180818 [SECURITY] [DLA-1469-1] libxcursor security update mailing-list third-party-advisory
- USN-3729-1 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking