X.Org X11 library: Multiple vulnerabilities

Background X.Org is an implementation of the X Window System. The X.Org X11 library provides the X11 protocol library files. Description Multiple vulnerabilities have been discovered in X.Org X11 library. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by...

Oracle Linux 7 : xorg-x11-server (ELSA-2018-3410)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3410 advisory. - CVE-2018-14665: Disable -logfile and -modulepath when running with elevated privileges Tenable has extracted the preceding description block directly from the...

Important: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

X.org libX11 Denial of Service Vulnerability (CNVD-2018-16966)

X.Org libX11 is an X11 X Window System client library run by the X.Org Foundation. A denial of service vulnerability exists in the 'XListExtensions' function of the ListExt.c file in X.Org libX11 1.6.5 and earlier versions. An attacker can exploit this vulnerability by sending a reply that causes...

Debian DLA-1469-1 : libxcursor security update

It was discovered that there was a denial of service or potentially code execution vulnerability in libxcursor, a library designed to help locate and load cursors for the X Window System. For Debian 8 'Jessie', this issue has been fixed in libxcursor version 1:1.1.14-1+deb8u2. We recommend that y...

[SECURITY] Fedora 28 Update: qt3-3.3.8b-74.fc28

Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README...

[SECURITY] Fedora 27 Update: qt3-3.3.8b-74.fc27

Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README...

[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.38-1.fc26

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Solaris 10 (x86) : 126364-08

SunOS 5.10x86: X Window System changes -. Date this patch was last updated by Sun : Oct/16/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

xorg-x11-server denial of service vulnerability (CNVD-2018-03151)

The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in the XFIXES extension in versions of xorg-x11-server prior to 1.19.5, which stems from a lack of length detection in the program. An attacker can exploit this...

xorg-x11-server denial of service vulnerability (CNVD-2018-03105)

The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in the RENDER extension in xorg-x11-server versions prior to 1.19.5, which stems from a lack of length detection in the program. An attacker can exploit this...

ALPINE-CVE-2017-12179

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in SProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

ALPINE-CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

X.Org Server: Multiple vulnerabilities

Background The X.Org project provides an open source implementation of the X Window System. Description Multiple vulnerabilities have been discovered in X.Org Server. Please review the referenced CVE identifiers for details. Impact Attackers could execute arbitrary code or cause a Denial of Servi...

X.Org Server: Multiple vulnerabilities

Background The X.Org project provides an open source implementation of the X Window System. Description Multiple vulnerabilities have been discovered in X.Org Server. Please review the referenced CVE identifiers for details. Impact A local attacker could cause a global buffer overflow or a Denial...

[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.19-1.fc26

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

UBUNTU-CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

UBUNTU-CVE-2017-12179

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in SProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

[SECURITY] Fedora 25 Update: ImageMagick-6.9.9.15-1.fc25

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

UBUNTU-CVE-2017-13723

In X.Org Server aka xserver and xorg-server before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp...