CVE-2015-9262

NONE EPSS 92.3%

Published Aug 1, 20187y ago · Modified Jun 17, 20262w ago

Published Aug 1, 2018 7y ago

Last Modified Jun 17, 2026 2w ago

Description

_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.

Threat Intelligence

EPSS Exploit Probability

92.3% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety

Affected Products 8

Vendor	Product	Version	Range
debian	debian_linux	8.0	any
canonical	ubuntu_linux	14.04	any
canonical	ubuntu_linux	16.04	any
x	libxcursor	*	<1.1.15
redhat	ansible_tower	3.3	any
redhat	enterprise_linux_desktop	7.0	any
redhat	enterprise_linux_server	7.0	any
redhat	enterprise_linux_workstation	7.0	any

References 6

access.redhat.com https://access.redhat.com/errata/RHSA-2018:3059

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:3505

Third Party Advisory
bugs.freedesktop.org https://bugs.freedesktop.org/show_bug.cgi?id=90857

PatchThird Party Advisory
cgit.freedesktop.org https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=897213f36baf6926daf6d192c709cf627aa5fd05

PatchThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2018/08/msg00016.html

Mailing ListThird Party Advisory
usn.ubuntu.com https://usn.ubuntu.com/3729-1/

Third Party Advisory

Remediation

bugs.freedesktop.org https://bugs.freedesktop.org/show_bug.cgi?id=90857

PatchThird Party Advisory
cgit.freedesktop.org https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=897213f36baf6926daf6d192c709cf627aa5fd05

PatchThird Party Advisory