CVE-2015-0255
xnest: X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before1.17.1 allows remote attackers to obtain se...
CVE-2015-0255 is fixed in 7 products on 1 platform, first by xnest 2:1.16.2.901-1ubuntu4, released February 11, 2015. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0433
91st percentile
X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before1.17.1 allows remote attackers to obtain sensitive information from processmemory or cause a denial of service (crash) via a crafted string lengthvalue in a XkbSetGeometry request.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| xnest · Ubuntu 24.10 (oracular) | 2:1.16.2.901-1ubuntu4 | xnest 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xnest · Ubuntu 25.04 (plucky) | 2:1.16.2.901-1ubuntu4 | xnest 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xorg-server-source · Ubuntu 24.10 (oracular) | 2:1.16.2.901-1ubuntu4 | xorg-server-source 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xorg-server-source · Ubuntu 25.04 (plucky) | 2:1.16.2.901-1ubuntu4 | xorg-server-source 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xserver-common · Ubuntu 24.10 (oracular) | 2:1.16.2.901-1ubuntu4 | xserver-common 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xserver-common · Ubuntu 25.04 (plucky) | 2:1.16.2.901-1ubuntu4 | xserver-common 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xserver-xephyr · Ubuntu 24.10 (oracular) | 2:1.16.2.901-1ubuntu4 | xserver-xephyr 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xserver-xephyr · Ubuntu 25.04 (plucky) | 2:1.16.2.901-1ubuntu4 | xserver-xephyr 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xserver-xorg-core · Ubuntu 24.10 (oracular) | 2:1.16.2.901-1ubuntu4 | xserver-xorg-core 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xserver-xorg-core · Ubuntu 25.04 (plucky) | 2:1.16.2.901-1ubuntu4 | xserver-xorg-core 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xserver-xorg-legacy · Ubuntu 24.10 (oracular) | 2:1.16.2.901-1ubuntu4 | xserver-xorg-legacy 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xserver-xorg-legacy · Ubuntu 25.04 (plucky) | 2:1.16.2.901-1ubuntu4 | xserver-xorg-legacy 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xvfb · Ubuntu 24.10 (oracular) | 2:1.16.2.901-1ubuntu4 | xvfb 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |
| xvfb · Ubuntu 25.04 (plucky) | 2:1.16.2.901-1ubuntu4 | xvfb 2:1.16.2.901-1ubuntu4 | Feb 11, 2015 |