PatchTheCVExpcd vulnerabilities and fixes
Recent CVEs affecting xpcd, with upgrade or downgrade steps. 3 tracked.
xpcd has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2005-02-11. Highest priority: CVE-2003-0649 (score 46/100).
- CVE-2005-0074 HIGH 7.2 DOWNGRADE Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.
- CVE-2004-0402 MEDIUM 4.6 DOWNGRADE MITIGATE Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execut
- CVE-2003-0649 HIGH 7.2 UPGRADE Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long
FAQ
How do I fix xpcd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xpcd being exploited right now?
None of the tracked xpcd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xpcd CVE should I patch first?
CVE-2003-0649 currently ranks highest (46/100): Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long.