Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-1379

21
FAUCET Score

CVE-2008-1379 describes an integer overflow vulnerability in the fbShmPutImage function of the MIT-SHM extension within X.Org X11R7.3's X server 1.4. This flaw allows authenticated attackers to read arbitrary process memory by supplying specially crafted Pixmap width and height values. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring network access and authentication to achieve a high impact on confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
r7.3CPE matchmatch criteria
cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.8MEDIUM

AV:N/AC:L/Au:S/C:C/I:N/A:N

Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
8.0
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
1.39%
Probability of exploitation in next 30 days
EPSS Percentile
69.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0139 is in the 83rd percentile among its peer group of 21,954 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: XFree86-0:4.1.0-88.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: XFree86-0:4.3.0-128.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: xorg-x11-0:6.8.2-1.EL.33.0.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: xorg-x11-server-0:1.1.1-48.41.el5_2.1
View patch

Vendor Advisories (1)

redhatCVE-2008-1379Moderate

X.org MIT-SHM extension arbitrary memory read

Jun 11, 2008

References

ftp.freedesktop.org / pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1379.diff
Patch
h20000.www2.hp.com / bizsupport/TechSupport/Document.jsp
labs.idefense.com / intelligence/vulnerabilities/display.php
lists.apple.com / archives/security-announce/2009/Feb/msg00000.html
lists.freedesktop.org / archives/xorg/2008-June/036026.html
lists.opensuse.org / opensuse-security-announce/2008-06/msg00002.html
lists.opensuse.org / opensuse-security-announce/2008-09/msg00005.html
rhn.redhat.com / errata/RHSA-2008-0502.html
rhn.redhat.com / errata/RHSA-2008-0504.html
rhn.redhat.com / errata/RHSA-2008-0512.html
secunia.com / advisories/30627
Vendor Advisory
secunia.com / advisories/30628
Vendor Advisory
secunia.com / advisories/30629
Vendor Advisory
secunia.com / advisories/30630
Vendor Advisory
secunia.com / advisories/30637
Vendor Advisory
secunia.com / advisories/30659
Vendor Advisory
secunia.com / advisories/30664
Vendor Advisory
secunia.com / advisories/30666
Vendor Advisory
secunia.com / advisories/30671
secunia.com / advisories/30715
secunia.com / advisories/30772
secunia.com / advisories/30809
secunia.com / advisories/30843
secunia.com / advisories/31025
secunia.com / advisories/31109
secunia.com / advisories/32099
secunia.com / advisories/32545
secunia.com / advisories/33937
security.gentoo.org / glsa/glsa-200806-07.xml
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/43016
issues.rpath.com / browse/RPL-2607
issues.rpath.com / browse/RPL-2619
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8966
sunsolve.sun.com / search/document.do
support.apple.com / kb/HT3438
support.avaya.com / elmodocs2/security/ASA-2008-249.htm
wiki.rpath.com / wiki/Advisories:rPSA-2008-0201
debian.org / security/2008/dsa-1595
gentoo.org / security/en/glsa/glsa-200807-07.xml
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
redhat.com / support/errata/RHSA-2008-0503.html
securityfocus.com / archive/1/493548/100/0/threaded
securityfocus.com / archive/1/493550/100/0/threaded
securityfocus.com / bid/29669
Patch
ubuntu.com / usn/usn-616-1
vupen.com / english/advisories/2008/1803
vupen.com / english/advisories/2008/1833
vupen.com / english/advisories/2008/1983/references
vupen.com / english/advisories/2008/3000