Lucene search

K
redosRedosROS-20220112-01
HistoryJan 12, 2022 - 12:00 a.m.

ROS-20220112-01

2022-01-1200:00:00
redos.red-soft.ru
34

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

16.4%

A vulnerability in the X.Org Server - X Window System server implementation is caused by an out-of-memory write in the
SProcScreenSaverSuspend() function in the Screen Saver extension. Exploitation of the vulnerability could allow
an attacker to send a specially crafted suspend request, initiate an unrestricted write, and
execute arbitrary code with elevated privileges

A vulnerability in the X.Org Server - X Window System server implementation is caused by a write beyond memory boundaries in the
ProcXFixesCreatePointerBarrier() function in the XFixes extension. Exploitation of the vulnerability could allow an
an attacker to send a specially crafted CreatePointerBarrier request, initiate a write outside of the
bounds and execute arbitrary code with elevated privileges

A vulnerability in the X.Org Server - X Window System server implementation is caused by an out-of-bounds memory write in the
SwapCreateRegister() function in the Record extension. Exploitation of the vulnerability could allow an attacker to
send specially crafted RecordCreateContext and RecordRegisterClients requests, trigger a record beyond the
out of bounds and execute arbitrary code with elevated privileges

A vulnerability in the X.Org Server - X Window System server implementation is caused by an out-of-bounds memory write in the
SProcRenderCompositeGlyphs() function in the Render extension. Exploitation of the vulnerability could allow
an attacker to send a specially crafted CompositeGlyphs request, initiate an out-of-bounds write
bounds and execute arbitrary code with elevated privileges

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64xorg-x11-server-xorg<= 1.20.14-1UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

16.4%