Test ID:	1.3.6.1.4.1.25623.1.1.4.2015.0045.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2015:0045-1)
Summary:	The remote host is missing an update for the 'xorg-x11-server' package(s) announced via the SUSE-SU-2015:0045-1 advisory.
Description:	Summary: The remote host is missing an update for the 'xorg-x11-server' package(s) announced via the SUSE-SU-2015:0045-1 advisory. Vulnerability Insight: The XOrg X11 server was updated to fix 12 security issues: * Denial of service due to unchecked malloc in client authentication (CVE-2014-8091). * Integer overflows calculating memory needs for requests (CVE-2014-8092). * Integer overflows calculating memory needs for requests in GLX extension (CVE-2014-8093). * Integer overflows calculating memory needs for requests in DRI2 extension (CVE-2014-8094). * Out of bounds access due to not validating length or offset values in requests in XInput extension (CVE-2014-8095). * Out of bounds access due to not validating length or offset values in requests in XC-MISC extension (CVE-2014-8096). * Out of bounds access due to not validating length or offset values in requests in DBE extension (CVE-2014-8097). * Out of bounds access due to not validating length or offset values in requests in GLX extension (CVE-2014-8098). * Out of bounds access due to not validating length or offset values in requests in XVideo extension (CVE-2014-8099). * Out of bounds access due to not validating length or offset values in requests in Render extension (CVE-2014-8100). * Out of bounds access due to not validating length or offset values in requests in RandR extension (CVE-2014-8101). * Out of bounds access due to not validating length or offset values in requests in XFixes extension (CVE-2014-8102). Additionally, these non-security issues were fixed: * Fix crash in RENDER protocol, PanoramiX wrappers (bnc#864911). * Some formats used for pictures did not work with the chosen framebuffer format (bnc#886213). Security Issues: * CVE-2014-8091 * CVE-2014-8092 * CVE-2014-8093 * CVE-2014-8094 * CVE-2014-8095 * CVE-2014-8096 * CVE-2014-8097 * CVE-2014-8098 * CVE-2014-8099 * CVE-2014-8100 * CVE-2014-8101 * CVE-2014-8102 Affected Software/OS: 'xorg-x11-server' package(s) on SUSE Linux Enterprise Desktop 11-SP3, SUSE Linux Enterprise Server 11-SP3, SUSE Linux Enterprise Software Development Kit 11-SP3. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8091 61947 http://secunia.com/advisories/61947 62292 http://secunia.com/advisories/62292 71597 http://www.securityfocus.com/bid/71597 DSA-3095 http://www.debian.org/security/2014/dsa-3095 GLSA-201504-06 https://security.gentoo.org/glsa/201504-06 MDVSA-2015:119 http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 http://advisories.mageia.org/MGASA-2014-0532.html http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ Common Vulnerability Exposure (CVE) ID: CVE-2014-8092 71595 http://www.securityfocus.com/bid/71595 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html Common Vulnerability Exposure (CVE) ID: CVE-2014-8093 71596 http://www.securityfocus.com/bid/71596 http://nvidia.custhelp.com/app/answers/detail/a_id/3610 Common Vulnerability Exposure (CVE) ID: CVE-2014-8094 71601 http://www.securityfocus.com/bid/71601 Common Vulnerability Exposure (CVE) ID: CVE-2014-8095 71599 http://www.securityfocus.com/bid/71599 Common Vulnerability Exposure (CVE) ID: CVE-2014-8096 71598 http://www.securityfocus.com/bid/71598 Common Vulnerability Exposure (CVE) ID: CVE-2014-8097 71604 http://www.securityfocus.com/bid/71604 Common Vulnerability Exposure (CVE) ID: CVE-2014-8098 71606 http://www.securityfocus.com/bid/71606 Common Vulnerability Exposure (CVE) ID: CVE-2014-8099 71600 http://www.securityfocus.com/bid/71600 Common Vulnerability Exposure (CVE) ID: CVE-2014-8100 71602 http://www.securityfocus.com/bid/71602 Common Vulnerability Exposure (CVE) ID: CVE-2014-8101 71605 http://www.securityfocus.com/bid/71605 Common Vulnerability Exposure (CVE) ID: CVE-2014-8102 71608 http://www.securityfocus.com/bid/71608
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.