X.org X Server Local Privilege Expansion Vulnerability

X.Org X Server is an X Window System display server from the X.Org Foundation. A security vulnerability exists in X.org X Server. An attacker could exploit the vulnerability to run code in another user's Xorg session...

X.org X Server Local Memory Misreference Vulnerability

X.Org X Server is an X Window System display server from the X.Org Foundation. A local memory misreference vulnerability exists in X.org X Server. An attacker could exploit this vulnerability to execute arbitrary code...

GLSA-201701-64 : X.Org X Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-64 X.Org X Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.Org X Server. Please review the CVE identifiers referenced below for details. Impact : An authenticated attacker could possibly...

X.Org X Server: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description Multiple vulnerabilities have been discovered in X.Org X Server. Please review the CVE identifiers referenced below for details. Impact An authenticated attacker could possibly cause a Denia...

SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2016:3189-1)

This update for xorg-x11-libs fixes the following issues : - insufficient validation of data from the X server can cause a one byte buffer read underrun bsc1003023, CVE-2016-7953 - insufficient validation of data from the X server can cause out of boundary memory access or endless loops Denial of...

CVE-2016-7947

Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response...

CVE-2016-7949

Public technical details about CVE-2016-7949 are not provided in the connected documents. The initial description notes buffer overflows in libXrender before 0.9.10, but no further specifics are included here. Monitor for updates.

CVE-2016-5407: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 XvQueryAdaptors and 2 XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data...

openSUSE Security Update : libXfixes (openSUSE-2016-1429)

This update for libXfixes fixes a security issue : - insufficient validation of data from the X server could cause an integer overflow on 32 bit architectures boo1002995, CVE-2016-7944. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

SUSE SLES11 Security Update : xorg-x11-libX11 (SUSE-SU-2016:3054-1)

This update for xorg-x11-libX11 fixes the following issues : - plug a memory leak bsc1002991, CVE-2016-7942 - insufficient validation of data from the X server can cause out of boundary memory read XGetImage or write XListFonts bsc1002991, CVE-2016-7942 Note that Tenable Network Security has...

Apple Mac OS X Server Detection (SSH Login)

SSH login-based detection of Apple Mac OS X Server. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple OS X Server Information Disclosure And Security Bypass Vulnerabilities

Apple OS X Server is prone to information disclosure and security bypass vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apple OS X Server Multiple Vulnerabilities (Dec 2016)

Apple OS X Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:apple:osxserver";...

openSUSE Security Update : X Window System client libraries (openSUSE-2016-1214)

This update for the X Window System client libraries fixes a class of privilege escalation issues. A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission...

DLA-660-1 libxrandr - security update

Bulletin has no description...

PT-2016-7440

Name of the Vulnerable Software and Affected Versions libXrandr versions prior to 1.5.1 Description The issue is related to multiple integer overflows that can be triggered by remote X servers via crafted responses, leading to out-of-bounds write operations. Recommendations For versions prior to...

CVE-2016-4694

The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...

CVE-2016-4694

The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...

Design/Logic Flaw

The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...

CVE-2016-4754

CVE-2016-4754 affects ServerDocs Server in Apple OS X Server before 5.2. The issue is weaknesses in the RC4 cryptographic algorithm that allow an unauthenticated, remote attacker to defeat cryptographic protection. Apple’s macOS Server 5.2 mitigation removes RC4 support for ServerDocs Server, add...