xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check...

FreeBSD : xorg server -- Multiple vulnerabilities (8df49466-5664-11f0-943a-18c04d5ea3dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8df49466-5664-11f0-943a-18c04d5ea3dc advisory. The X.Org project reports: The Big Requests extension allows requests larger than the 16-bit length...

FreeBSD : xorg server -- Multiple vulnerabilities (b14cabf7-5663-11f0-943a-18c04d5ea3dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b14cabf7-5663-11f0-943a-18c04d5ea3dc advisory. The X.Org project reports: The X Rendering extension allows creating animated cursors providin...

The vulnerability of the XkbChangeTypesOfKey() function in the Wayland protocol for X.Org XWayland, which is implemented in the X Window System X.Org Server, allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the XkbChangeTypesOfKey function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

AZL-64265 CVE-2025-49179 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2

A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks...

xorg server -- Multiple vulnerabilities

The X.Org project reports: CVE-2025-49176: Integer overflow in Big Requests Extension The Big Requests extension allows requests larger than the 16-bit length limit. It uses integers for the request length and checks for the size not to exceed the maxBigRequestSize limit, but does so after...

TencentOS Server 3: xorg-x11-server (TSSA-2023:0282)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0282 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 2: xorg-x11-server (TSSA-2024:0027)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0027 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 2: tigervnc (TSSA-2023:0064)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0064 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 4: xorg-x11-server (TSSA-2024:0588)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0588 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: tigervnc (TSSA-2024:1087)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1087 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: xorg-x11-server (TSSA-2024:0717)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0717 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: tigervnc (TSSA-2024:0052)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0052 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Alibaba Cloud Linux 3 : 0076: xorg-x11-server-Xwayland (ALINUX3-SA-2025:0076)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0076 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-9632: A flaw was found in the X.o...

Alibaba Cloud Linux 3 : 0095: tigervnc (ALINUX3-SA-2024:0095)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0095 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-5380: A use-after-free flaw was...

Alibaba Cloud Linux 3 : 0252: tigervnc (ALINUX3-SA-2024:0252)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0252 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-9632: A flaw was found in the X.org server...

Alibaba Cloud Linux 3 : 0010: xorg-x11-server (ALINUX3-SA-2024:0010)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0010 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-1393: A flaw was found in X.Org Server...

Alibaba Cloud Linux 3 : 0123: xorg-x11-server (ALINUX3-SA-2024:0123)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0123 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-31080: A heap-based buffer...

xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org serv...

The vulnerability of the compRedirectWindow() function in the Wayland protocol for X.Org XWayland, which is implemented in the X Window System X.Org Server, allows a attacker to execute arbitrary code.

The vulnerability of the compRedirectWindow function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...