CVE-2015-9262
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2018-08-01
- Last modified
- 2024-08-06
- Weaknesses
- CWE-119
Affected products
- Ubuntu Linux (Canonical)
- Debian Linux (Debian)
- Ansible Tower (Redhat)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Workstation (Redhat)
- Libxcursor (X)
References
- https://access.redhat.com/errata/RHSA-2018:3059
- https://access.redhat.com/errata/RHSA-2018:3505
- https://bugs.freedesktop.org/show_bug.cgi?id=90857
- https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=897213f36baf6926daf6d192c709cf627aa5fd05
- https://lists.debian.org/debian-lts-announce/2018/08/msg00016.html
- https://usn.ubuntu.com/3729-1/
