Description
Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xorg-server | 2:1.4.1~git20080105-2 | — |
| Debian 13 | xorg-server | 2:1.4.1~git20080105-2 | — |
| Debian 12 | xorg-server | 2:1.4.1~git20080105-2 | — |
| Debian 5.0 | xorg-server | 2:1.3.0.0.dfsg-12lenny2 | DTSA-110-1 |
| Debian 4.0 | xorg-server | 2:1.1.1-21etch3 | DSA-1466-2 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | xfree86 | 4.3.0.dfsg.1-14sarge7 | DSA-1466-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | xorg-x11-server +6 | 1.1.1-48.26.el5_1.5 | RHSA-2008:0031 |
| RHEL 4 | xorg-x11 +17 | 6.8.2-1.EL.33.0.2 | RHSA-2008:0030 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | xorg-x11-server | 1.20.13-1.2 | openSUSE-SU-2024:11525-1 |
Advisories 5
- RHSA-2008:0031 Red Hat Security Advisory: xorg-x11-server security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0030 Red Hat Security Advisory: xorg-x11 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1466-2 libxfont xfree86 xorg-server - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-110-1 xorg-server - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:11525-1 xorg-x11-server-1.20.13-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 27336 vdb-entry
- ADV-2008-0184 vdb-entry
- FEDORA-2008-0831 vendor-advisory
- SUSE-SA:2008:003 vendor-advisory
- 28532 third-party-advisory
- 29707 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm
- 28843 third-party-advisory
- DSA-1466 vendor-advisory
- 28540 third-party-advisory
- 20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs mailing-list
- 20080117 Multiple Vendor X Server XFree86-Misc Extension Invalid Array Index Vulnerability third-party-advisory
- xorg-xfree86misc-code-execution(39766) vdb-entry
- 28718 third-party-advisory
- 200153 vendor-advisory
- 28584 third-party-advisory
- [4.1] 20080208 012: SECURITY FIX: February 8, 2008 vendor-advisory
- 28941 third-party-advisory
- 28592 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm
- MDVSA-2008:022 vendor-advisory
- 27354 vdb-entry
- 30161 third-party-advisory
- GLSA-200805-07 vendor-advisory
- RHSA-2008:0030 vendor-advisory
- 28543 third-party-advisory
- 28273 third-party-advisory
- RHSA-2008:0031 vendor-advisory
- oval:org.mitre.oval:def:11718 vdb-entry signature
- 28550 third-party-advisory
- ADV-2008-0497 vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=204362
- MDVSA-2008:023 vendor-advisory
- 28885 third-party-advisory
- 103200 vendor-advisory
- MDVSA-2008:025 vendor-advisory
- USN-571-1 vendor-advisory
- GLSA-200804-05 vendor-advisory
- 28535 third-party-advisory
- [xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server mailing-list
- 1019232 vdb-entry
- https://issues.rpath.com/browse/RPL-2010
- [4.2] 20080208 006: SECURITY FIX: February 8, 2008 vendor-advisory
- 28539 third-party-advisory
- 28616 third-party-advisory
- FEDORA-2008-0760 vendor-advisory
- 28536 third-party-advisory
- 28693 third-party-advisory
- GLSA-200801-09 vendor-advisory
- ADV-2008-0179 vdb-entry