Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2014-8095

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

X.Org libX11是X.org基金会的一个X11（X Window系统）客户端库。 X.Org libX11 1.16.2及之前版本存在缓冲区错误漏洞，该漏洞源于多个函数没有正确过滤值。远程攻击者可利用该漏洞造成拒绝服务（越边界读取或写入）或执行任意代码。

AI Predicted 6.5 Difficulty: Moderate EPSS 4.43% · P91 Updated Feb 21, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2014-8095

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXChangeDeviceControl, (2) ProcXChangeDeviceControl, (3) ProcXChangeFeedbackControl, (4) ProcXSendExtensionEvent, (5) SProcXIAllowEvents, (6) SProcXIChangeCursor, (7) ProcXIChangeHierarchy, (8) SProcXIGetClientPointer, (9) SProcXIGrabDevice, (10) SProcXIUngrabDevice, (11) ProcXIUngrabDevice, (12) SProcXIPassiveGrabDevice, (13) ProcXIPassiveGrabDevice, (14) SProcXIPassiveUngrabDevice, (15) ProcXIPassiveUngrabDevice, (16) SProcXListDeviceProperties, (17) SProcXDeleteDeviceProperty, (18) SProcXIListProperties, (19) SProcXIDeleteProperty, (20) SProcXIGetProperty, (21) SProcXIQueryDevice, (22) SProcXIQueryPointer, (23) SProcXISelectEvents, (24) SProcXISetClientPointer, (25) SProcXISetFocus, (26) SProcXIGetFocus, or (27) SProcXIWarpPointer function.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

X.Org libX11 扩展缓冲区溢出漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2014-8095

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2014-8095

请登录查看更多情报信息。

Vendor Advisories for CVE-2014-8095 (8)

http://advisories.mageia.org/MGASA-2014-0532.html x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html x_refsource_CONFIRM
http://www.securityfocus.com/bid/71599 vdb-entry x_refsource_BID
http://secunia.com/advisories/61947 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62292 third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2014/dsa-3095 vendor-advisory x_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 vendor-advisory x_refsource_MANDRIVA
https://security.gentoo.org/glsa/201504-06 vendor-advisory x_refsource_GENTOO

Other References for CVE-2014-8095 (3)

http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html x_refsource_CONFIRM

https://www.cve.org/CVERecord?id=CVE-2014-8095

Same Patch Batch · n/a · 2014-12-10 · 69 CVEs total

CVE-2014-9364		Drupal LoginToboggan模块跨站脚本漏洞
CVE-2014-9091		Icecast 权限许可和访问控制漏洞
CVE-2014-9120		Subrion CMS 跨站脚本漏洞
CVE-2014-8601		PowerDNS Recursor 资源管理错误漏洞
CVE-2014-8093		X.Org libX11 数字错误漏洞
CVE-2014-8092		X.Org libX11 安全漏洞
CVE-2014-8091		X.Org libX11 安全漏洞
CVE-2014-7809		Apache Struts 跨站请求伪造漏洞
CVE-2014-7807		Apache CloudStack 授权问题漏洞
CVE-2014-7866		多款ZOHO产品目录遍历漏洞
CVE-2014-8094		X.Org Server 扩展拒绝服务漏洞
CVE-2014-9363		Drupal Meta tags quick模块开放重定向漏洞
CVE-2014-9362		Drupal Meta tags quick模块跨站脚本漏洞
CVE-2014-9361		Drupal LoginToboggan模块信息泄露漏洞
CVE-2014-9166		Adobe ColdFusion 拒绝服务漏洞
CVE-2014-9165		Adobe Reader和Acrobat 资源管理错误漏洞
CVE-2014-9164		Adobe Flash Player 代码注入漏洞
CVE-2014-9163		Adobe Flash Player 基于栈的缓冲区溢出漏洞
CVE-2014-9162		Adobe Flash Player 信息泄露漏洞
CVE-2014-9159		Adobe Reader和Acrobat 基于堆的缓冲区溢出漏洞

Showing top 20 of 69 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2014-8095

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2014-8095

Quick assessment

I. Basic Information for CVE-2014-8095

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2014-8095

III. Intelligence Information for CVE-2014-8095

Vendor Advisories for CVE-2014-8095 (8)

Other References for CVE-2014-8095 (3)

Same Patch Batch · n/a · 2014-12-10 · 69 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2014-8095

Leave a comment