CVE-2015-9262: canonical ubuntu_linux

CVSS: 9.8v3.0CriticalModified

AliasesMGASA-2018-0364SUSE-SU-2018:2791-1SUSE-SU-2018:2841-1+5 more

Published 01-08-2018Last modified 06-08-2024

Vulnerability summary

CVE-2015-9262 is a critical (CVSS 9.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 5.68% chance of exploitation in the next 30 days, higher than 92.9% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.0 (NVD)

EPSS score

5.68%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

01-08-2018
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.09.8v2.07.5

EPSS trend

Probability

5.68%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.68% on 19-09-2026

19-09-202619-10-2026

EPSS score

5.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Redhat152 products

egl-utils< 0:8.3.0-10.el7
freeglut< 0:3.0.0-8.el7
freeglut-debuginfo< 0:3.0.0-8.el7
freeglut-devel< 0:3.0.0-8.el7
glx-utils< 0:8.3.0-10.el7
intel-gpu-tools< 0:2.99.917-28.20180530.el7
libdrm< 0:2.4.91-3.el7
libdrm-debuginfo< 0:2.4.91-3.el7
libdrm-devel< 0:2.4.91-3.el7
libepoxy< 0:1.5.2-1.el7
libepoxy-debuginfo< 0:1.5.2-1.el7
libepoxy-devel< 0:1.5.2-1.el7
libglvnd< 1:1.0.1-0.8.git5baa1e5.el7
libglvnd-core-devel< 1:1.0.1-0.8.git5baa1e5.el7
libglvnd-debuginfo< 1:1.0.1-0.8.git5baa1e5.el7
libglvnd-devel< 1:1.0.1-0.8.git5baa1e5.el7
libglvnd-egl< 1:1.0.1-0.8.git5baa1e5.el7
libglvnd-gles< 1:1.0.1-0.8.git5baa1e5.el7
libglvnd-glx< 1:1.0.1-0.8.git5baa1e5.el7
libglvnd-opengl< 1:1.0.1-0.8.git5baa1e5.el7
libinput< 0:1.10.7-2.el7
libinput-debuginfo< 0:1.10.7-2.el7
libinput-devel< 0:1.10.7-2.el7
libwacom< 0:0.30-1.el7
libwacom-data< 0:0.30-1.el7
libwacom-debuginfo< 0:0.30-1.el7
libwacom-devel< 0:0.30-1.el7
libX11< 0:1.6.5-2.el7
libX11-common< 0:1.6.5-2.el7
libX11-debuginfo< 0:1.6.5-2.el7
libX11-devel< 0:1.6.5-2.el7
libxcb< 0:1.13-1.el7
libxcb-debuginfo< 0:1.13-1.el7
libxcb-devel< 0:1.13-1.el7
libxcb-doc< 0:1.13-1.el7
libXcursor< 0:1.1.15-1.el7
libXcursor-debuginfo< 0:1.1.15-1.el7
libXcursor-devel< 0:1.1.15-1.el7
libXfont< 0:1.5.4-1.el7
libXfont-debuginfo< 0:1.5.4-1.el7
libXfont-devel< 0:1.5.4-1.el7
libXfont2< 0:2.0.3-1.el7
libXfont2-debuginfo< 0:2.0.3-1.el7
libXfont2-devel< 0:2.0.3-1.el7
libXres< 0:1.2.0-1.el7
libXres-debuginfo< 0:1.2.0-1.el7
libXres-devel< 0:1.2.0-1.el7
mesa< 0:18.0.5-3.el7
mesa-debuginfo< 0:18.0.5-3.el7
mesa-demos< 0:8.3.0-10.el7
mesa-demos-debuginfo< 0:8.3.0-10.el7
mesa-dri-drivers< 0:18.0.5-3.el7
mesa-filesystem< 0:18.0.5-3.el7
mesa-libEGL< 0:18.0.5-3.el7
mesa-libEGL-devel< 0:18.0.5-3.el7
mesa-libgbm< 0:18.0.5-3.el7
mesa-libgbm-devel< 0:18.0.5-3.el7
mesa-libGL< 0:18.0.5-3.el7
mesa-libGL-devel< 0:18.0.5-3.el7
mesa-libglapi< 0:18.0.5-3.el7
mesa-libGLES< 0:18.0.5-3.el7
mesa-libGLES-devel< 0:18.0.5-3.el7
mesa-libOSMesa< 0:18.0.5-3.el7
mesa-libOSMesa-devel< 0:18.0.5-3.el7
mesa-libwayland-egl< 0:18.0.5-3.el7
mesa-libwayland-egl-devel< 0:18.0.5-3.el7
mesa-libxatracker< 0:18.0.5-3.el7
mesa-libxatracker-devel< 0:18.0.5-3.el7
mesa-vdpau-drivers< 0:18.0.5-3.el7
mesa-vulkan-drivers< 0:18.0.5-3.el7
tigervnc< 0:1.8.0-13.el7
tigervnc-debuginfo< 0:1.8.0-13.el7
tigervnc-icons< 0:1.8.0-13.el7
tigervnc-license< 0:1.8.0-13.el7
tigervnc-server< 0:1.8.0-13.el7
tigervnc-server-applet< 0:1.8.0-13.el7
tigervnc-server-minimal< 0:1.8.0-13.el7
tigervnc-server-module< 0:1.8.0-13.el7
vulkan< 0:1.1.73.0-1.el7
vulkan-debuginfo< 0:1.1.73.0-1.el7
vulkan-devel< 0:1.1.73.0-1.el7
vulkan-filesystem< 0:1.1.73.0-1.el7
xcb-proto< 0:1.13-1.el7
xkeyboard-config< 0:2.24-1.el7
xkeyboard-config-devel< 0:2.24-1.el7
xorg-x11-drv-ati< 0:18.0.1-1.el7
xorg-x11-drv-ati-debuginfo< 0:18.0.1-1.el7
xorg-x11-drv-dummy< 0:0.3.7-1.el7.1
xorg-x11-drv-dummy-debuginfo< 0:0.3.7-1.el7.1
xorg-x11-drv-evdev< 0:2.10.6-1.el7
xorg-x11-drv-evdev-debuginfo< 0:2.10.6-1.el7
xorg-x11-drv-evdev-devel< 0:2.10.6-1.el7
xorg-x11-drv-fbdev< 0:0.5.0-1.el7
xorg-x11-drv-fbdev-debuginfo< 0:0.5.0-1.el7
xorg-x11-drv-intel< 0:2.99.917-28.20180530.el7
xorg-x11-drv-intel-debuginfo< 0:2.99.917-28.20180530.el7
xorg-x11-drv-intel-devel< 0:2.99.917-28.20180530.el7
xorg-x11-drv-libinput< 0:0.27.1-2.el7
xorg-x11-drv-libinput-debuginfo< 0:0.27.1-2.el7
xorg-x11-drv-libinput-devel< 0:0.27.1-2.el7
xorg-x11-drv-mouse< 0:1.9.2-2.el7
xorg-x11-drv-mouse-debuginfo< 0:1.9.2-2.el7
xorg-x11-drv-mouse-devel< 0:1.9.2-2.el7
xorg-x11-drv-nouveau< 1:1.0.15-1.el7
xorg-x11-drv-nouveau-debuginfo< 1:1.0.15-1.el7
xorg-x11-drv-openchrome< 0:0.5.0-3.el7.1
xorg-x11-drv-openchrome-debuginfo< 0:0.5.0-3.el7.1
xorg-x11-drv-openchrome-devel< 0:0.5.0-3.el7.1
xorg-x11-drv-qxl< 0:0.1.5-4.el7.1
xorg-x11-drv-qxl-debuginfo< 0:0.1.5-4.el7.1
xorg-x11-drv-synaptics< 0:1.9.0-2.el7
xorg-x11-drv-synaptics-debuginfo< 0:1.9.0-2.el7
xorg-x11-drv-synaptics-devel< 0:1.9.0-2.el7
xorg-x11-drv-v4l< 0:0.2.0-49.el7
xorg-x11-drv-v4l-debuginfo< 0:0.2.0-49.el7
xorg-x11-drv-vesa< 0:2.4.0-1.el7
xorg-x11-drv-vesa-debuginfo< 0:2.4.0-1.el7
xorg-x11-drv-vmmouse< 0:13.1.0-1.el7.1
xorg-x11-drv-vmmouse-debuginfo< 0:13.1.0-1.el7.1
xorg-x11-drv-vmware< 0:13.2.1-1.el7.1
xorg-x11-drv-vmware-debuginfo< 0:13.2.1-1.el7.1
xorg-x11-drv-void< 0:1.4.1-2.el7.1
xorg-x11-drv-void-debuginfo< 0:1.4.1-2.el7.1
xorg-x11-drv-wacom< 0:0.36.1-1.el7
xorg-x11-drv-wacom-debuginfo< 0:0.36.1-1.el7
xorg-x11-drv-wacom-devel< 0:0.36.1-1.el7
xorg-x11-font-utils< 1:7.5-21.el7
xorg-x11-font-utils-debuginfo< 1:7.5-21.el7
xorg-x11-proto-devel< 0:2018.4-1.el7
xorg-x11-server< 0:1.20.1-3.el7
xorg-x11-server-common< 0:1.20.1-3.el7
xorg-x11-server-debuginfo< 0:1.20.1-3.el7
xorg-x11-server-devel< 0:1.20.1-3.el7
xorg-x11-server-source< 0:1.20.1-3.el7
xorg-x11-server-Xdmx< 0:1.20.1-3.el7
xorg-x11-server-Xephyr< 0:1.20.1-3.el7
xorg-x11-server-Xnest< 0:1.20.1-3.el7
xorg-x11-server-Xorg< 0:1.20.1-3.el7
xorg-x11-server-Xspice< 0:0.1.5-4.el7.1
xorg-x11-server-Xvfb< 0:1.20.1-3.el7
xorg-x11-server-Xwayland< 0:1.20.1-3.el7
xorg-x11-utils< 0:7.5-23.el7
xorg-x11-utils-debuginfo< 0:7.5-23.el7
xorg-x11-xkb-extras< 0:7.7-14.el7
xorg-x11-xkb-utils< 0:7.7-14.el7
xorg-x11-xkb-utils-debuginfo< 0:7.7-14.el7
xorg-x11-xkb-utils-devel< 0:7.7-14.el7

Show all 152

Suse7 products

libXcursor&distro=SUSE Linux Enterprise Desktop 12 SP3< 1.1.14-4.6.1
libXcursor&distro=SUSE Linux Enterprise Server 12 SP3< 1.1.14-4.6.1
libXcursor&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 1.1.14-4.6.1
libXcursor&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 1.1.14-4.6.1
xorg-x11-libs&distro=SUSE Linux Enterprise Server 11 SP4< 7.4-8.26.50.8.1

Show all 7

Debian2 products

libxcursor< 1:1.1.15-1 | < 1:1.1.14-1+deb8u2
debian_linuxEOL8.0

Canonical1 product

ubuntu_linuxEOL14.04 | 16.04

Mageia1 product

libxcursor< 1.1.14-6.2.mga6

Ubuntu1 product

libxcursor< 1:1.1.14-1ubuntu0.14.04.2 | < 1:1.1.14-1ubuntu0.16.04.2

X1 product

libxcursor< 1.1.15

7 vendors · 165 products

References

39 links

access.redhat.com/errata/RHSA-2018:3059Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=897213f36baf6926daf6d192c709cf627aa5fd05X Refsource MISCPatchThird Party Advisory
usn.ubuntu.com/3729-1/Vendor AdvisoryX Refsource UBUNTUThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2018:3505Vendor AdvisoryX Refsource REDHATThird Party Advisory
lists.debian.org/debian-lts-announce/2018/08/msg00016.htmlMailing ListX Refsource MLISTThird Party Advisory
bugs.freedesktop.org/show_bug.cgi?id=90857X Refsource MISCPatchThird Party Advisory
advisories.mageia.org/MGASA-2018-0364.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=23478REPORT
openwall.com/lists/oss-security/2018/08/22/6WEB
www.suse.com/support/update/announcement/2018/suse-su-20182791-1/Advisory

Show all 39 references

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities