SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2014-8097

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary…

MEDIUM 6.5EPSS 4.37%

Does this matter?

Lower severity and a low EPSS score (4.37%). Track it; it rarely justifies an emergency change on its own.

Description

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) ProcDbeSwapBuffers or (2) SProcDbeSwapBuffers function.

CVSS 2.0
6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
4.37% probability · 91th percentile
CISA KEV
Not listed
Weakness
CWE-119
Affected
x.org/x server · x.org/x11
Source
secalert@redhat.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.