Scientific Linux Security Update : xorg-x11-server on SL6.x, SL7.x i386/x86_64

Medium Nessus Plugin ID 82759


The remote Scientific Linux host is missing one or more security updates.


A buffer over-read flaw was found in the way the X.Org server handled XkbGetGeometry requests. A malicious, authorized client could use this flaw to disclose portions of the X.Org server memory, or cause the X.Org server to crash using a specially crafted XkbGetGeometry request. (CVE-2015-0255)


Update the affected packages.

See Also

Plugin Details

Severity: Medium

ID: 82759

File Name: sl_20150410_xorg_x11_server_on_SL6_x.nasl

Version: $Revision: 1.1 $

Type: local

Agent: unix

Published: 2015/04/14

Modified: 2015/04/14

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2015/04/10

Reference Information

CVE: CVE-2015-0255