X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service (crash) or possibly gain privileges via vectors involving cached xkb files.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "xdmx",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xdmx-tools",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xnest",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xserver-common",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xserver-xfbdev",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xserver-xorg-dev",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xserver-xorg-xmir",
"binary_version": "2:1.14.4-1ubuntu2"
},
{
"binary_name": "xvfb",
"binary_version": "2:1.14.4-1ubuntu2"
}
]
}