CVE-2014-8094

CVE-2014-8094 describes an integer overflow vulnerability in the X.Org Server's DRI2 extension, specifically within the ProcDRI2GetBuffers function. This flaw affects X.Org Server versions 1.7.0 through 1.16.x before 1.16.3, impacting various Debian and Oracle Solaris distributions. A remote authenticated attacker can exploit this to cause a denial of service (crash) or potentially execute arbitrary code through crafted requests leading to out-of-bounds memory access. The vulnerability carries a CVSS score of 6.5, indicating a medium severity. Exploitation requires network access and authentication (AV:N/AC:L/Au:S), but the attack complexity is low. The potential impact includes partial confidentiality, integrity, and availability compromise (C:P/I:P/A:P). Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.