| Package | Affected versions | Patched versions |
|---|---|---|
| x.org x11 | = 6.0= 6.1= 6.3= 6.4= 6.5.1= 6.6 | |
| xfree86 | ≤ 3.3.2 |
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free