_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c (CVE-2015-9262)

  - Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of     insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.
    (CVE-2013-2003)

  - libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when     processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector     exists against the related code in cursor/xcursor.c in Wayland through 1.14.0. (CVE-2017-16612)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c (CVE-2015-9262)

  - libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when     processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector     exists against the related code in cursor/xcursor.c in Wayland through 1.14.0. (CVE-2017-16612)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3059 advisory.

    freeglut     [3.0.0-8]
    - HTTPS URLs
    - Pin soname to libglut.so.3 in the %files glob

    [3.0.0-7]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

    [3.0.0-6]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

    [3.0.0-5]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

    [3.0.0-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

    [3.0.0-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

    [3.0.0-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

    [3.0.0-1]
    - New upstream version

    [2.8.1-5]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

    [2.8.1-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

    libX11     [1.6.5-2]
    - Rebuild to pick up new xproto keysyms (#1600147)

    libXcursor     [1.1.15-1]
    - libXcursor 1.1.15

    libXfont     [1.5.4-1]
    - libXfont 1.5.4.

    libXfont2     [2.0.3-1]
    - libXfont 2.0.3

    libXres     [1.2.0-1]
    - libXres 1.2.0

    libdrm     [2.4.91-3]
    - Add WHL, AML, etc PCI IDs

    [2.4.91-2]
    - libdrm 2.4.91

    libepoxy     [1.5.2-1]
    - epoxy 1.5.2

    libglvnd     [1.0.1-0.8.git5baa1e5]
    - rename fallback from fedora to system

    [1.0.1-0.7.git5baa1e5]
    - Add another fallback GLX library name

    [1.0.1-0.6.git5baa1e5]
    - Enable %check for all but ppc64 and s390x, which has known but low-impact       failures
    - Simplify %release

    [1.0.1-0.5.20180327git5baa1e5]
    - Go back to Requires: mesa-*, the fallout is too great (#1568881 etc)

    [1:1.0.1-0.4.20180327git5baa1e5]
    - Update snapshot to 20180327

    [1.0.1-0.3.20180226gitb029c24]
    - Use Recommends: mesa-* not Requires.
    - (Trivially) switch the build to python3

    [1:1.0.1-0.2.20180226gitb029c24]
    - Update Python 2 dependency declarations to new packaging standards       (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

    [1:1.0.1-0.1.20180226gitb029c24]
    - Update snapshot to 20180226
    - Update scriptlets

    libinput     [1.10.7-2]
    - Correct the automake version number to 1.10.7 (#1564642)

    [1.10.7-1]
    - libinput 1.10.7 (#1564642)

    libwacom     [0.30-1]
    - libwacom 0.30 (#1564606)

    libxcb     [1.13-1]
    - libxcb 1.13

    mesa     [18.0.5-3]
    - rename fedora to system in glvnd fallback

    [18.0.5-2]
    - Fix timeout overflow warnings (backport from upstream + virgl)

    [18.0.5-1]
    - Mesa 18.0.5

    [18.0.4-1.20180530]
    - rebase to 18.0.4
    - backport shm put/get image for improved sw renderers (esp under qxl)

    [18.0.3-5.20180508]
    - Fix gl.pc when using glvnd
    - Fix subpackage dependencies for glvnd

    [18.0.3-2.20180508]
    - Use glvnd

    [18.0.3-1.20180508]
    - rebase to 18.0.3

    mesa-demos     [8.3.0-10]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

    [8.3.0-9]
    - New git snapshot

    [8.3.0-8]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

    [8.3.0-7]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

    [8.3.0-6]
    - Fix xdriinfo not working with libglvnd (rhbz#1429894)

    [8.3.0-5]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

    [8.3.0-4]
    - Rebuild for glew 2.0.0

    [8.3.0-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

    [8.3.0-2]
    - Rebuild for glew 1.13

    [8.3.0-1]
    - 8.3.0

    [8.2.0-5]
    - New git snap
    - Add EGL/GLES buildreqs and egl-utils subpackage

    [8.2.0-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

    tigervnc     [1.8.0-13]
    - Add one remaining option to Xvnc manpage       Resolves: bz#1601880

    [1.8.0-12]
    - Add missing options to Xvnc manpage       Resolves: bz#1601880

    [1.8.0-11]
    - Properly kill session after user logs out       Resolves: bz#1259757

    [1.8.0-10]
    - Check endianness when constructing platform pixel buffer       Resolves: bz#1613264

    [1.8.0-9]
    - Use current server time for XUngrabPointer and XUngrabKeyboard       Resolves: bz#1605325

    [1.8.0-8]
    - Ignore fake focus events from XGrabKeyboard()       Resolves: bz#1602855

    [1.8.0-7]     Properly support Xorg 1.20       Resolves: bz#1564061

    [1.8.0-6]
    - Kill session after user logs out       Resolves: bz#1259757

      Build against Xorg 1.20       Resolves: bz#1564061

    vulkan     [1.1.73.0-1]
    - Update to 1.1.73.0 release
    - fixup spec for spirv-tools etc

    xcb-proto     [1.13-1]
    - xcb-proto 1.13

    [1.12-6]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

    [1.12-5]
    - Add a build-time dependency on python2-devel

    [1.12-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

    [1.12-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

    xkeyboard-config     [2.24-1]
    - xkeyboard-config 2.24 (#1564615)
    - Revert the high-keycode patches to avoid conflicts with xkbcomp < 1.4

    [2.23.1-1]
    - xkeyboard-config 2.23.1 (#1564615)

    xorg-x11-drv-ati     [18.0.1-1]
    - ati 18.0.1

    xorg-x11-drv-dummy     [0.3.7-1.1]
    - Rebuild for xserver 1.20

    xorg-x11-drv-evdev     [2.10.6-1]
    - evdev 2.10.6 (#1564618)

    xorg-x11-drv-fbdev     [0.5.0-1]
    - fbdev 0.5.0

    [0.4.3-25.1]
    - Rebuild for xserver 1.20

    xorg-x11-drv-intel     [2.99.917-28]
    - Today's git snapshot (commit 35947721)

    xorg-x11-drv-libinput     [0.27.1-2]
    - Fix invalid-sized memset() in the draglock code

    [0.27.1-1]
    - libinput 0.27.1 (#1564643)

    xorg-x11-drv-mouse     [1.9.2-2]
    - Avoid use of xf86GetOS (#1592607)

    xorg-x11-drv-nouveau     [1.0.15-1]
    - nouveau 1.0.15

    [1:1.0.13-3.1]
    - Rebuild for xserver 1.20

    xorg-x11-drv-openchrome     [0.5.0-3.1]
    - Rebuild for xserver 1.20

    xorg-x11-drv-qxl     [0.1.5-4.1]
    - Rebuild for xserver 1.20

    [0.1.5-4]
    - Fix crash when multiple QXL devices are in use       Resolves: rhbz#1428340

    xorg-x11-drv-synaptics     [1.9.0-2]
    - Fix infinite log spam in case of read errors (#1564624).

    xorg-x11-drv-v4l     [0.2.0-49]
    - Remove call to LoaderGetOS - Patch wasn't applied (#1601960)

    [0.2.0-48]
    - Remove call to LoaderGetOS (#1601960)

    xorg-x11-drv-vesa     [2.4.0-1]
    - vesa 2.4.0

    [2.3.2-25.1.1]
    - Rebuild for xserver 1.20

    xorg-x11-drv-vmmouse     [13.1.0-1.1]
    - Rebuild for xserver 1.20

    xorg-x11-drv-vmware     [13.2.1-1.1]
    - Rebuild for xserver 1.20

    xorg-x11-drv-void     [1.4.1-2.1]
    - Rebuild for xserver 1.20

    xorg-x11-drv-wacom     [0.36.1-1]
    - wacom 0.36.1 (#1564630)

    xorg-x11-font-utils     [1:7.5-21]
    - Rebase to F28 (#1564630)

    xorg-x11-proto-devel     [2018.4-1]
    - xorgproto 2018.4

    [2018.3-1]
    - xorgproto 2018.3

    [2018.2-1]
    - xorgproto 2018.2

    [2018.1-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

    [2018.1-1]
    - Switch to merged protocol headers
    - Drop evie headers
    - Pre-F18 changelog trim

    [7.7-24]
    - Drop bootstrap hack (that had been enabled for like nine years anyway)
    - Use https URLs

    [7.7-23]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

    [7.7-22]
    - Add xproto patches from upstream adding XF86Keyboard and XF86RFKill keysyms

    [7.7-21]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

    xorg-x11-server     [1.20.1-3]
    - Try harder to come up with an initial spanning configuration

    [1.20.1-2]
    - Make platform device probe a bit less fragile
    - Disable glamor on llvmpipe

    [1.20.1-1]
    - xserver 1.20.1
    - Enable backing store's Always mode

    [1.20.0-2]
    - Fix glx vendor hash table key size
    - Fix memory corruption during PanoramiX setup (#1601742)

    [1.20.0-1]
    - Fix 16bpp with modesetting driver

    [1.20.0-0.3]
    - Add patches for bz1591978

    [1.20.0-0.2]
    - Add patches for bz1585252

    [1.20.0-0.1]
    - Initial 1.20 rebuild

    xorg-x11-utils     [7.5-23]
    - xlsclients 1.1.4
    - xlsfonts 1.0.6
    - xprop 1.2.3
    - HTTPS URLs

    xorg-x11-xkb-utils     [7.7-14]
    - xkbcomp 1.4.2 (#1564634)

    [7.7-13]
    - Sync with F28 (#1564634)
    - setxkbmap 1.3.1
    - xkbcomp 1.4.1
    - xkbevd 1.1.4
    - xkbprint 1.0.4

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libXcursor packages installed that are affected by a vulnerability:

  - _XcursorThemeInherits in library.c in libXcursor before     1.1.15 allows remote attackers to cause denial of     service or potentially code execution via a one-byte     heap overflow. (CVE-2015-9262)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libXcursor package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - _XcursorThemeInherits in library.c in libXcursor before     1.1.15 allows remote attackers to cause denial of     service or potentially code execution via a one-byte     heap overflow.(CVE-2015-9262)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libXcursor package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - libxcursor: 1-byte heap-based overflow in
    _XcursorThemeInherits function in library.c     (CVE-2015-9262)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.(CVE-2015-9262)

_XcursorThemeInherits in library.c in libXcursor allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. (CVE-2015-9262)

According to the version of the libxcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - libxcursor: 1-byte heap-based overflow in
    _XcursorThemeInherits function in library.c     (CVE-2015-9262)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - libxcursor: 1-byte heap-based overflow in
    _XcursorThemeInherits function in library.c     (CVE-2015-9262)

The SL Team added a fix for upstream bug 1650634

Updated X.org server and driver packages are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es) :

* libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c (CVE-2015-9262)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3059 advisory.

    X.Org is an open-source implementation of the X Window System. It provides the basic low-level     functionality that full-fledged graphical user interfaces are designed upon.

    Security Fix(es):

    * libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c (CVE-2015-9262)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for libXcursor fixes the following security issue :

CVE-2015-9262: _XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow (bsc#1103511).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xorg-x11-libs fixes the following security issue :

CVE-2015-9262: _XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow (bsc#1103511)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libXcursor fixes the following issues :

  - CVE-2015-9262: _XcursorThemeInherits allowed remote     attackers to cause denial of service or potentially code     execution via a one-byte heap overflow (bsc#1103511)

It was discovered that there was a denial of service or (potentially code execution) vulnerability in libxcursor, a library designed to help locate and load cursors for the X Window System.

For Debian 8 'Jessie', this issue has been fixed in libxcursor version 1:1.1.14-1+deb8u2.

We recommend that you upgrade your libxcursor packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3729-1 advisory.

    It was discovered that libxcursor incorrectly handled certain files. An attacker could possibly use this     issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
199775	RHEL 5 : libxcursor (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199704	RHEL 6 : libxcursor (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
181044	Oracle Linux 7 : X.org / X11 (ELSA-2018-3059)	Nessus	Oracle Linux Local Security Checks	critical
127230	NewStart CGSL CORE 5.04 / MAIN 5.04 : libXcursor Vulnerability (NS-SA-2019-0048)	Nessus	NewStart CGSL Local Security Checks	critical
124898	EulerOS Virtualization for ARM 64 3.0.1.0 : libXcursor (EulerOS-SA-2019-1395)	Nessus	Huawei Local Security Checks	critical
123877	EulerOS Virtualization 2.5.4 : libXcursor (EulerOS-SA-2019-1191)	Nessus	Huawei Local Security Checks	critical
122679	Amazon Linux 2 : libXcursor (ALAS-2019-1173)	Nessus	Amazon Linux Local Security Checks	critical
122034	Amazon Linux AMI : libXcursor (ALAS-2019-1150)	Nessus	Amazon Linux Local Security Checks	critical
119927	EulerOS 2.0 SP3 : libxcursor (EulerOS-SA-2018-1438)	Nessus	Huawei Local Security Checks	critical
119926	EulerOS 2.0 SP2 : libxcursor (EulerOS-SA-2018-1437)	Nessus	Huawei Local Security Checks	critical
119178	Scientific Linux Security Update : X.org X11 on SL7.x x86_64 (20181030)	Nessus	Scientific Linux Local Security Checks	critical
118986	CentOS 7 : freeglut / libX11 / libXcursor / libXfont / libXfont2 / libXres / libdrm / libepoxy / etc (CESA-2018:3059)	Nessus	CentOS Local Security Checks	critical
118520	RHEL 7 : X.org X11 (RHSA-2018:3059)	Nessus	Red Hat Local Security Checks	critical
117701	SUSE SLED12 / SLES12 Security Update : libXcursor (SUSE-SU-2018:2841-1)	Nessus	SuSE Local Security Checks	critical
117664	SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2018:2791-1)	Nessus	SuSE Local Security Checks	critical
112138	openSUSE Security Update : libXcursor (openSUSE-2018-915)	Nessus	SuSE Local Security Checks	critical
111982	Debian DLA-1469-1 : libxcursor security update	Nessus	Debian Local Security Checks	critical
111576	Ubuntu 14.04 LTS / 16.04 LTS : libxcursor vulnerability (USN-3729-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2015-9262

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical