PT-2015-6084
CVE-2015-3164
·
Published
2015-07-01
·
Updated
2025-08-29
Description by
CVSS 2.0
3.6
LowMetricsAV:L/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
XWayland versions 1.16.x through 1.17.1
Description
The issue concerns the authentication setup in XWayland, which starts the server in non-authenticating mode. This allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
Recommendations
For XWayland versions 1.16.x through 1.17.1, update to version 1.17.2 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾