Vulnerability CVE-2010-4818

Vulnerability Name:

CVE-2010-4818 (CCN-70400)

Assigned:

2011-09-21

Published:

2011-09-21

Updated:

2012-09-06

Summary:

The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via (1) a crafted request that triggers a client swap in glx/glxcmdsswap.c; or (2) a crafted length or (3) a negative value in the screen field in a request to glx/glxcmds.c.

CVSS v3 Severity:

9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

8.5 High (CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C)
6.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

3.7 Low (REDHAT CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P)
2.7 Low (REDHAT Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): High Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-20

Vulnerability Consequences:

Gain Privileges

References:

Source: CONFIRM
Type: UNKNOWN
http://cgit.freedesktop.org/xorg/xserver/commit?id=3f0d3f4d97bce75c1828635c322b6560a45a037f

Source: CONFIRM
Type: UNKNOWN
http://cgit.freedesktop.org/xorg/xserver/commit?id=6c69235a9dfc52e4b4e47630ff4bab1a820eb543

Source: CONFIRM
Type: Exploit, Patch
http://cgit.freedesktop.org/xorg/xserver/commit?id=ec9c97c6bf70b523bc500bd3adf62176f1bb33a4

Source: MITRE
Type: CNA
CVE-2010-4818

Source: CCN
Type: RHSA-2011-1359
Moderate: xorg-x11-server security update

Source: REDHAT
Type: UNKNOWN
RHSA-2011:1359

Source: CCN
Type: RHSA-2011-1360
Moderate: xorg-x11 security update

Source: REDHAT
Type: UNKNOWN
RHSA-2011:1360

Source: MLIST
Type: UNKNOWN
[oss-security] 20110922 CVE Request: Missing input sanitation in various X GLX calls

Source: MLIST
Type: UNKNOWN
[oss-security] 20110923 Re: CVE Request: Missing input sanitation in various X GLX calls

Source: MLIST
Type: UNKNOWN
[oss-security] 20110923 Re: CVE Request: Missing input sanitation in various X GLX calls

Source: CCN
Type: OSVDB ID: 77299
X.Org X Window System (X11) GLX Call Parsing Remote Code Execution

Source: CCN
Type: BID-50002
X.Org X11 Local Privilege Escalation Vulnerability and Memory Leak Vulnerability

Source: CONFIRM
Type: UNKNOWN
https://bugs.freedesktop.org/show_bug.cgi?id=28823

Source: CCN
Type: Red Hat Bugzilla Bug 740954
CVE-2010-4818 X.org: multiple GLX input sanitization flaws

Source: MISC
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=740954

Source: XF
Type: UNKNOWN
x11-glx-code-execution(70400)

Vulnerable Configuration:

Configuration 1:

cpe:/a:x.org:x.org:1.7.7:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Configuration RedHat 7:

cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

Configuration RedHat 8:

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

Configuration RedHat 9:

cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

Configuration RedHat 10:

cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

Configuration RedHat 11:

cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

Configuration CCN 1:

cpe:/a:x:x.org_x11:6.0:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_server_eus:6.1.z:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20104818	V	CVE-2010-4818	2022-05-20
oval:org.opensuse.security:def:26221	P	Security update for python-numpy (Moderate) (in QA)	2022-01-17
oval:org.opensuse.security:def:26217	P	Security update for java-1_7_1-ibm (Moderate) (in QA)	2022-01-04
oval:org.opensuse.security:def:26187	P	Security update for libvpx (Moderate)	2021-12-23
oval:org.opensuse.security:def:42252	P	Security update for runc (Moderate)	2021-12-23
oval:org.opensuse.security:def:33065	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:32250	P	Security update for log4j (Important)	2021-12-17
oval:org.opensuse.security:def:32242	P	Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)	2021-12-14
oval:org.opensuse.security:def:31324	P	Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3) (Important)	2021-12-14
oval:org.opensuse.security:def:31313	P	Security update for ruby2.1 (Important)	2021-12-01
oval:org.opensuse.security:def:31312	P	Security update for java-1_7_0-openjdk (Important)	2021-11-24
oval:org.opensuse.security:def:26171	P	Security update for postgresql10 (Important)	2021-11-22
oval:org.opensuse.security:def:33742	P	Security update for postgresql10 (Important)	2021-11-22
oval:org.opensuse.security:def:26164	P	Security update for MozillaFirefox (Important)	2021-11-17
oval:org.opensuse.security:def:26153	P	Security update for git (Low)	2021-10-20
oval:org.opensuse.security:def:33024	P	Security update for util-linux (Moderate)	2021-10-19
oval:org.opensuse.security:def:26141	P	Security update for webkit2gtk3 (Important)	2021-10-06
oval:org.opensuse.security:def:26142	P	Security update for apache2 (Important)	2021-10-06
oval:org.opensuse.security:def:32193	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-09-23
oval:org.opensuse.security:def:26127	P	Security update for postgresql12 (Moderate)	2021-09-16
oval:org.opensuse.security:def:31679	P	Security update for xen (Important)	2021-09-06
oval:org.opensuse.security:def:26113	P	Security update for mysql-connector-java (Moderate)	2021-08-30
oval:org.opensuse.security:def:32986	P	Security update for unrar (Moderate)	2021-08-25
oval:org.opensuse.security:def:32985	P	Security update for openssl (Important)	2021-08-24
oval:org.opensuse.security:def:33703	P	Security update for python-PyYAML (Important)	2021-08-24
oval:org.opensuse.security:def:32163	P	Security update for MozillaFirefox (Important)	2021-08-17
oval:org.opensuse.security:def:32975	P	Security update for fastjar (Low)	2021-08-06
oval:org.opensuse.security:def:29404	P	Security update for libsndfile (Critical)	2021-08-05
oval:org.opensuse.security:def:32974	P	Security update for djvulibre (Important)	2021-08-05
oval:org.opensuse.security:def:32137	P	Security update for libsolv (Important)	2021-06-28
oval:org.opensuse.security:def:26083	P	Security update for zziplib (Moderate)	2021-06-25
oval:org.opensuse.security:def:32132	P	Security update for libnettle (Important)	2021-06-23
oval:org.opensuse.security:def:26074	P	Security update for freeradius-server (Moderate)	2021-06-11
oval:org.opensuse.security:def:36330	P	xorg-x11-Xvnc-7.4-27.105.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42737	P	xorg-x11-Xvnc-7.4-27.105.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36592	P	xorg-x11-server-sdk-7.4-27.105.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:32106	P	Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)	2021-06-04
oval:org.opensuse.security:def:34448	P	Security update for libwebp (Critical)	2021-06-02
oval:org.opensuse.security:def:31622	P	Security update for graphviz (Critical)	2021-05-19
oval:org.opensuse.security:def:32088	P	Security update for bind (Important)	2021-05-04
oval:org.opensuse.security:def:31613	P	Security update for tomcat (Important)	2021-04-29
oval:org.opensuse.security:def:26036	P	Security update for MozillaFirefox (Important)	2021-04-27
oval:org.opensuse.security:def:26025	P	Security update for openexr (Moderate)	2021-04-07
oval:org.opensuse.security:def:32066	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-04-07
oval:org.opensuse.security:def:28964	P	Security update for MozillaFirefox (Important)	2021-03-31
oval:org.opensuse.security:def:32281	P	Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3) (Important)	2021-03-17
oval:org.opensuse.security:def:31745	P	Security update for glib2 (Important)	2021-03-16
oval:org.opensuse.security:def:33766	P	Security update for screen (Important)	2021-02-17
oval:org.opensuse.security:def:34488	P	Security update for MozillaFirefox (Important)	2021-01-29
oval:org.opensuse.security:def:33654	P	Security update for flac (Moderate)	2021-01-04
oval:org.opensuse.security:def:25972	P	Security update for postgresql12 (Important)	2020-12-04
oval:org.opensuse.security:def:36061	P	xorg-x11-Xvnc-7.4-27.81.7 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42468	P	xorg-x11-Xvnc-7.4-27.81.7 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35845	P	xorg-x11-Xvnc-7.4-27.60.5 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:28965	P	Security update for openssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:25680	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31922	P	Security update for ghostscript-library (Important)	2020-12-01
oval:org.opensuse.security:def:26342	P	Security update for openjpeg2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31527	P	Security update for Ruby	2020-12-01
oval:org.opensuse.security:def:26859	P	acpid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29045	P	Security update for adns (Important)	2020-12-01
oval:org.opensuse.security:def:25821	P	Security update for lhasa (Moderate)	2020-12-01
oval:org.opensuse.security:def:32027	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:27024	P	radvd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31539	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:32462	P	Security update for xorg-x11-libXfixes (Moderate)	2020-12-01
oval:org.opensuse.security:def:26917	P	hyper-v on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29262	P	Security update for wget (Moderate)	2020-12-01
oval:org.opensuse.security:def:25611	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:26456	P	Security update for MozillaThunderbird (Important)	2020-12-01
oval:org.opensuse.security:def:32550	P	libexif on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27590	P	xorg-x11-server-sdk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32770	P	perl-Tk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25686	P	Security update for wicked (Important)	2020-12-01
oval:org.opensuse.security:def:31894	P	Security update for fetchmail (Moderate)	2020-12-01
oval:org.opensuse.security:def:26558	P	gnutls on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32616	P	xen on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33295	P	xorg-x11-libXext-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29611	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:25895	P	Security update for pcsc-lite (Moderate)	2020-12-01
oval:org.opensuse.security:def:26611	P	mailman on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33293	P	xorg-x11-Xvnc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31796	P	Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:26345	P	Security update for libgit2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:33440	P	Security update for Evolution	2020-12-01
oval:org.opensuse.security:def:29699	P	Security update for fetchmail (Moderate)	2020-12-01
oval:org.opensuse.security:def:26844	P	xorg-x11-Xvnc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25395	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:31398	P	Security update for perl (Moderate)	2020-12-01
oval:org.opensuse.security:def:27293	P	squid3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31808	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26483	P	Security update for chromium (Moderate)	2020-12-01
oval:org.opensuse.security:def:29761	P	Security update for giflib (Moderate)	2020-12-01
oval:org.opensuse.security:def:25407	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:26240	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:32303	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:25880	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:32014	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26718	P	hplip on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30436	P	Security update for Xorg	2020-12-01
oval:org.opensuse.security:def:25599	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31766	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26328	P	used on wotan :) (Low)	2020-12-01
oval:org.opensuse.security:def:25955	P	Security update for gstreamer-0_10-plugins-bad (Moderate)	2020-12-01
oval:org.opensuse.security:def:26820	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33810	P	Security update for ghostscript-library (Moderate)	2020-12-01
oval:org.opensuse.security:def:28976	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:25737	P	Security update for libpng12 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31978	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:26386	P	Security update for kdepim, messagelib (Moderate)	2020-12-01
oval:org.opensuse.security:def:31528	P	Security update for ruby (Moderate)	2020-12-01
oval:org.opensuse.security:def:32406	P	Security update for wavpack (Moderate)	2020-12-01
oval:org.opensuse.security:def:26873	P	clamav on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29176	P	Security update for microcode_ctl (Important)	2020-12-01
oval:org.opensuse.security:def:27059	P	xorg-x11-Xvnc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25610	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26305	P	Security update for python-setuptools (Moderate)	2020-12-01
oval:org.opensuse.security:def:32511	P	findutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27555	P	rubygem-activemodel-3_2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29319	P	Security update for compat-openssl097g (Moderate)	2020-12-01
oval:org.opensuse.security:def:25622	P	Security update for wavpack (Moderate)	2020-12-01
oval:org.opensuse.security:def:31837	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:26509	P	Security update for cacti, cacti-spine (Moderate)	2020-12-01
oval:org.opensuse.security:def:32572	P	libvorbis on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33200	P	lvm2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29557	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:32809	P	xorg-x11-Xvnc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25814	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:31981	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:26597	P	libpoppler-glib4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33254	P	sendmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33352	P	Security update for openssl (Important)	2020-12-01
oval:org.opensuse.security:def:29660	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:26809	P	puppet on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25952	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26655	P	xterm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31797	P	Recommended update for NetworkManager-kde4 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26426	P	Security update for singularity (Moderate)	2020-12-01
oval:org.opensuse.security:def:33597	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:29717	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:25396	P	Security update for perl-DBI (Important)	2020-12-01
oval:org.opensuse.security:def:31530	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:27328	P	xorg-x11-Xvnc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25879	P	Security update for pidgin-otr (Important)	2020-12-01
oval:org.opensuse.security:def:31882	P	Security update for dnsmasq (Important)	2020-12-01
oval:org.opensuse.security:def:26567	P	java-1_4_2-ibm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30399	P	Security update for Xen	2020-12-01
oval:org.opensuse.security:def:25471	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26289	P	Security update for sane-backends (Important)	2020-12-01
oval:org.opensuse.security:def:32347	P	Security update for sqlite3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25891	P	Security update for libimobiledevice, usbmuxd (Important)	2020-12-01
oval:org.opensuse.security:def:26771	P	libvirt on GA media (Moderate)	2020-12-01
oval:org.mitre.oval:def:21211	P	USN-1232-3 -- xorg-server vulnerability	2014-06-30
oval:org.mitre.oval:def:20337	P	USN-1232-2 -- xorg-server regression	2014-06-30
oval:org.mitre.oval:def:20825	P	USN-1232-1 -- xorg-server vulnerabilities	2014-06-30
oval:org.mitre.oval:def:23763	P	ELSA-2011:1359: xorg-x11-server security update (Moderate)	2014-05-26
oval:org.mitre.oval:def:21941	P	RHSA-2011:1359: xorg-x11-server security update (Moderate)	2014-02-24
oval:com.redhat.rhsa:def:20111359	P	RHSA-2011:1359: xorg-x11-server security update (Moderate)	2011-10-06
oval:com.redhat.rhsa:def:20111360	P	RHSA-2011:1360: xorg-x11 security update (Moderate)	2011-10-06

BACK