Debian DSA-2679-1 : xserver-xorg-video-openchrome - several vulnerabilities

medium Nessus Plugin ID 66563

Language:

Synopsis

The remote Debian host is missing a security-related update.

Description

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to privilege escalation or denial of service.

Solution

Upgrade the xserver-xorg-video-openchrome packages.

For the oldstable distribution (squeeze), this problem has been fixed in version 1:0.2.904+svn842-2+squeeze1.

For the stable distribution (wheezy), this problem has been fixed in version 1:0.2.906-2+deb7u1.

Plugin Details

Severity: Medium

ID: 66563

File Name: debian_DSA-2679.nasl

Version: 1.8

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 5/24/2013

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.5

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:xserver-xorg-video-openchrome, cpe:/o:debian:debian_linux:6.0, cpe:/o:debian:debian_linux:7.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 5/23/2013

Reference Information

CVE: CVE-2013-1994

DSA: 2679

Detections

Analytics