PT-2015-6084
CVE-2015-3164
·
تاريخ النشر
2015-07-01
·
تاريخ التحديث
2025-08-29
الوصف من
CVSS 2.0
3.6
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
XWayland versions 1.16.x through 1.17.1
Description
The issue concerns the authentication setup in XWayland, which starts the server in non-authenticating mode. This allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
Recommendations
For XWayland versions 1.16.x through 1.17.1, update to version 1.17.2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾