Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.13.2013.287.05
Category:Slackware Local Security Checks
Title:Slackware: Security Advisory (SSA:2013-287-05)
Summary:The remote host is missing an update for the 'xorg-server' package(s) announced via the SSA:2013-287-05 advisory.
Description:Summary:
The remote host is missing an update for the 'xorg-server' package(s) announced via the SSA:2013-287-05 advisory.

Vulnerability Insight:
New xorg-server packages are available for Slackware 12.1, 12.2, 13.0, 13.1,
13.37, 14.0, and -current to fix a security issue.


Here are the details from the Slackware 14.0 ChangeLog:
+--------------------------+
patches/packages/xorg-server-1.12.4-i486-2_slack14.0.txz: Rebuilt.
Patched a use-after-free bug that can cause an X server crash or
memory corruption.
For more information, see:
[link moved to references]
(* Security fix *)
patches/packages/xorg-server-xephyr-1.12.4-i486-2_slack14.0.txz: Rebuilt.
patches/packages/xorg-server-xnest-1.12.4-i486-2_slack14.0.txz: Rebuilt.
patches/packages/xorg-server-xvfb-1.12.4-i486-2_slack14.0.txz: Rebuilt.
+--------------------------+

Affected Software/OS:
'xorg-server' package(s) on Slackware 12.1, Slackware 12.2, Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware 14.0, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
6.5

CVSS Vector:
AV:N/AC:L/Au:S/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2013-4396
BugTraq ID: 62892
http://www.securityfocus.com/bid/62892
Debian Security Information: DSA-2784 (Google Search)
http://www.debian.org/security/2013/dsa-2784
http://openwall.com/lists/oss-security/2013/10/08/6
http://lists.x.org/archives/xorg-announce/2013-October/002332.html
RedHat Security Advisories: RHSA-2013:1426
http://rhn.redhat.com/errata/RHSA-2013-1426.html
SuSE Security Announcement: openSUSE-SU-2013:1610 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-10/msg00056.html
SuSE Security Announcement: openSUSE-SU-2013:1614 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-10/msg00060.html
http://www.ubuntu.com/usn/USN-1990-1
CopyrightCopyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.