_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3059 advisory.

  - _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of     service or potentially code execution via a one-byte heap overflow. (CVE-2015-9262)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libXcursor packages installed that are affected by a vulnerability:

  - _XcursorThemeInherits in library.c in libXcursor before     1.1.15 allows remote attackers to cause denial of     service or potentially code execution via a one-byte     heap overflow. (CVE-2015-9262)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libXcursor package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - _XcursorThemeInherits in library.c in libXcursor before     1.1.15 allows remote attackers to cause denial of     service or potentially code execution via a one-byte     heap overflow.(CVE-2015-9262)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libXcursor package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - libxcursor: 1-byte heap-based overflow in
    _XcursorThemeInherits function in library.c     (CVE-2015-9262)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.(CVE-2015-9262)

_XcursorThemeInherits in library.c in libXcursor allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. (CVE-2015-9262)

According to the version of the libxcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - libxcursor: 1-byte heap-based overflow in
    _XcursorThemeInherits function in library.c     (CVE-2015-9262)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - libxcursor: 1-byte heap-based overflow in
    _XcursorThemeInherits function in library.c     (CVE-2015-9262)

The SL Team added a fix for upstream bug 1650634

Updated X.org server and driver packages are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es) :

* libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c (CVE-2015-9262)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3059 advisory.

  - libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c (CVE-2015-9262)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for libXcursor fixes the following security issue :

CVE-2015-9262: _XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow (bsc#1103511).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xorg-x11-libs fixes the following security issue :

CVE-2015-9262: _XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow (bsc#1103511)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libXcursor fixes the following issues :

  - CVE-2015-9262: _XcursorThemeInherits allowed remote     attackers to cause denial of service or potentially code     execution via a one-byte heap overflow (bsc#1103511)

It was discovered that there was a denial of service or (potentially code execution) vulnerability in libxcursor, a library designed to help locate and load cursors for the X Window System.

For Debian 8 'Jessie', this issue has been fixed in libxcursor version 1:1.1.14-1+deb8u2.

We recommend that you upgrade your libxcursor packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that libxcursor incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
181044	Oracle Linux 7 : X.org / X11 (ELSA-2018-3059)	Nessus	Oracle Linux Local Security Checks	critical
127230	NewStart CGSL CORE 5.04 / MAIN 5.04 : libXcursor Vulnerability (NS-SA-2019-0048)	Nessus	NewStart CGSL Local Security Checks	critical
124898	EulerOS Virtualization for ARM 64 3.0.1.0 : libXcursor (EulerOS-SA-2019-1395)	Nessus	Huawei Local Security Checks	critical
123877	EulerOS Virtualization 2.5.4 : libXcursor (EulerOS-SA-2019-1191)	Nessus	Huawei Local Security Checks	critical
122679	Amazon Linux 2 : libXcursor (ALAS-2019-1173)	Nessus	Amazon Linux Local Security Checks	critical
122034	Amazon Linux AMI : libXcursor (ALAS-2019-1150)	Nessus	Amazon Linux Local Security Checks	critical
119927	EulerOS 2.0 SP3 : libxcursor (EulerOS-SA-2018-1438)	Nessus	Huawei Local Security Checks	critical
119926	EulerOS 2.0 SP2 : libxcursor (EulerOS-SA-2018-1437)	Nessus	Huawei Local Security Checks	critical
119178	Scientific Linux Security Update : X.org X11 on SL7.x x86_64 (20181030)	Nessus	Scientific Linux Local Security Checks	critical
118986	CentOS 7 : freeglut / libX11 / libXcursor / libXfont / libXfont2 / libXres / libdrm / libepoxy / etc (CESA-2018:3059)	Nessus	CentOS Local Security Checks	critical
118520	RHEL 7 : X.org X11 (RHSA-2018:3059)	Nessus	Red Hat Local Security Checks	critical
117701	SUSE SLED12 / SLES12 Security Update : libXcursor (SUSE-SU-2018:2841-1)	Nessus	SuSE Local Security Checks	critical
117664	SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2018:2791-1)	Nessus	SuSE Local Security Checks	critical
112138	openSUSE Security Update : libXcursor (openSUSE-2018-915)	Nessus	SuSE Local Security Checks	critical
111982	Debian DLA-1469-1 : libxcursor security update	Nessus	Debian Local Security Checks	critical
111576	Ubuntu 14.04 LTS / 16.04 LTS : libxcursor vulnerability (USN-3729-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2015-9262

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical