Heap-based buffer overflow in libXcursor - CVE-2015-9262

Vulnerability identifier: #VU17462

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-9262

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in _XcursorThemeInherits in library.c. A remote attacker can trigger a one-byte heap overflow and cause the service to crash or execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

libXcursor
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Dynamic System Analysis (DSA) Preboot
Session Smart Router

Install update from vendor's website.

libXcursor - update to 1.1.15
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
Session Smart Router - addressed in versions 5.4.7, 5.5.3

• https://access.redhat.com/errata/RHSA-2018:3059
• https://access.redhat.com/errata/RHSA-2018:3505
• https://bugs.freedesktop.org/show_bug.cgi?id=90857
• https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?

• Amazon Linux AMI update for libXcursor
• Red Hat update for X.org X11
• Multiple vulnerabilities in Juniper Networks Session Smart Router
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot