PatchTheCVExfree86 vulnerabilities and fixes
Recent CVEs affecting xfree86, with upgrade or downgrade steps. 6 tracked.
xfree86 has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2014-12-10. Highest priority: CVE-2014-8098 (score 51/100).
- CVE-2014-8101 MEDIUM 6.5 DOWNGRADE UPGRADE The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xser
- CVE-2014-8100 MEDIUM 6.5 DOWNGRADE UPGRADE The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xse
- CVE-2014-8099 MEDIUM 6.5 DOWNGRADE UPGRADE The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xse
- CVE-2014-8098 MEDIUM 6.5 MITIGATE UPGRADE The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver
- CVE-2014-8093 MEDIUM 6.5 DOWNGRADE UPGRADE Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7,
- CVE-2012-1699 LOW 3.6 DOWNGRADE UPGRADE The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFre
FAQ
How do I fix xfree86 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xfree86 being exploited right now?
None of the tracked xfree86 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xfree86 CVE should I patch first?
CVE-2014-8098 currently ranks highest (51/100): The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver .