Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : X.Org X Server vulnerabilities (USN-7846-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7846-1 advisory. Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these...

SUSE CVE-2025-62229

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

PT-2025-44228

Name of the Vulnerable Software and Affected Versions X.Org X Server and Xwayland versions 2:21.1.16-1ubuntu1.2 through 2:24.1.6-1ubuntu0.2 Description A flaw exists in the X.Org X server and Xwayland when handling X11 Present extension notifications. Improper error handling during notification...

PT-2025-44229

Name of the Vulnerable Software and Affected Versions X.Org X Server versions 2:21.1.16-1ubuntu1.2 and earlier X.Org X Server affected versions not specified Description The X.Org X Server contains flaws in memory handling and client resource cleanup. Specifically, the X Keyboard Xkb extension...

EUVD-2017-2610

Malware in sbrugna...

EUVD-2022-55160

Malicious code in bioql PyPI...

GLSA-202506-04 : X.Org X server, XWayland: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202506-04 X.Org X server, XWayland: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE identifiers referenced below for details. Tenable has extracted the...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : X.Org X Server vulnerabilities (USN-7573-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7573-1 advisory. Nils Emmerich discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these...

USN-7573-1: X.Org X Server vulnerabilities

Nils Emmerich discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, obtain sensitive information, or possibly execute arbitrary code...

X.Org X Server 安全漏洞

X.Org X Server is an X Window System display server from the X.Org Foundation. A security vulnerability exists in X.Org X Server that stems from improper request handling and could lead to a denial of service...

X.Org X server, XWayland: Multiple Vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...

CVE-2019-17624

"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sending ct.cchar 1000 times, an attacker can cause a denial of service application crash or possibly have unspecified other impact. Note: It is disputed if the X.Org X Server is...

Medium: xorg-x11-server

Issue Overview: In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2025-939)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-939 advisory. In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock,...

SUSE CVE-2022-49737

In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input...

CVE-2022-49737

In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input...

USN-7299-4: X.Org X Server regression

USN-7299-2 fix vulnerabilities in X.Org X Server. This fix caused a regression in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update fix the regression and re-apply the fix for the CVE listed. We apologize for the inconvenience. Original advisory details: Jan-Niklas Sohn discovered that the X.Org...

CVE-2022-49737

In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input...

CVE-2022-49737

In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input...

CVE-2022-49737

In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input...