CVE Daily

CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xor...

High CVSS 7.5

Overview

The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xorg-server) before 1.16.4 allows attackers to cause a denial of service (divide-by-zero and crash) via a zero-height PutImage request.

CWE: CWE-369 Published: 2016-12-13T16:59:04.347
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags