CVE-2020-14345

A flaw was found in X.Org Server. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

libX11 -- Doublefree in locale handlng code

The X.org project reports: There is an integer overflow and a double free vulnerability in the way LibX11 handles locales. The integer overflow is a necessary precursor to the double free...

X.Org Server Pixel Data Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processi...

FreeBSD : libX11 -- Heap corruption in the X input method client in libX11 (6faa7feb-d3fa-11ea-9aba-0c9d925bbbc0)

The X.org project reports : The X Input Method XIM client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed messages from an input method. C Tenable Network Security, Inc. The descriptive text and...

xorg-server -- Pixel Data Uninitialized Memory Information Disclosure

The X.org project reports: Allocation for pixmap data in AllocatePixmap does not initialize the memory in xserver, it leads to leak uninitialize heap memory to clients. When the X server runs with elevated privileges. This flaw can lead to ASLR bypass, which when combined with other flaws...

libX11 -- Heap corruption in the X input method client in libX11

The X.org project reports: The X Input Method XIM client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed messages from an input method...

Denial Of Service (DoS)

X.Org is vulnerable to denial of service DoS. An input sanitization flaw was found in the X.Org Render extension. A malicious, authorized client could use this flaw to leak arbitrary memory from the X.Org server process, or possibly crash the X.Org server...

Denial Of Service (DoS)

X.Org is vulnerable to denial of service DoS.Multiple input sanitization flaws were found in the X.Org GLX OpenGL extension to the X Window System extension. A malicious, authorized client could use these flaws to crash the X.Org server or, potentially, execute arbitrary code with root privileges...

Arbitrary Code Execution

libxfont is vulnerable to arbitrary code execution. The vulnerability exists as a buffer overflow flaw was found in the way the libXfont library, used by the X.Org server, handled malformed font files compressed using UNIX compress. A malicious, local user could exploit this issue to potentially...

Denial Of Service (DoS)

X.Org is vulnerable to Denial of Service DoS. Due to an incorrect calculation flaw in the X.Org Render extension, a malicious, authorized client can crash the X.Org server or, potentially, execute arbitrary code with root privileges...

Arbitrary Code Execution

xorg-x11-server is vulnerable to arbitrary code execution. The vulnerability exists as an input validation flaw was found in the X.Org server's XFree86-Misc extension. A malicious authorized client could exploit this issue to cause a denial of service crash, or potentially execute arbitrary code...

Arbitrary Code Execution

xorg-x11-server is vulnerable to arbitrary code execution. The vulnerability exists as a malicious authorized client could exploit this issue to cause a denial of service crash, or potentially execute arbitrary code with root privileges on the X.Org server...

Arbitrary Code Execution

xorg-x11-server is vulnerable to arbitrary code execution. Multiple integer overflow flaws were found in X.org's Render extension. A malicious authorized client could exploit these issues to cause a denial of service crash or, potentially, execute arbitrary code with root privileges on the X.Org...

Arbitrary Code Execution

xorg-x11-server is vulnerable to arbitrary code execution. Multiple integer overflow flaws were found in X.org's Render extension. A malicious authorized client could exploit these issues to cause a denial of service crash or, potentially, execute arbitrary code with root privileges on the X.Org...

Information Disclosure

xorg-x11-server is vulnerable to information disclosure. An input validation flaw was discovered in X.org's MIT-SHM extension. A client connected to the X.org server could read arbitrary server memory. This could result in the sensitive data of other users of the X.org server being disclosed...

Arbitrary Code Execution

xorg-x11-server is vulnerable to arbitrary code execution. An input validation flaw was discovered in X.org's Security and Record extensions. A malicious authorized client could exploit this issue to cause a denial of service crash or, potentially, execute arbitrary code with root privileges on t...

Arbitrary Code Execution

libxfont is vulnerable to arbitrary code execution. The vulnerability exists as a heap based buffer overflow flaw was found in the way the X.Org server handled malformed font files. A malicious local user could exploit this issue to potentially execute arbitrary code with the privileges of the...

Integer Overflow

X.org is vulnerable to Integer Overflow. A malicious authorized client could exploit this issue to cause a denial of service crash or potentially execute arbitrary code with root privileges on the X.org server...

Information Disclosure

X.org is vulnerable to Information Disclosure. An integer overflow flaw was found in the X.org XGetPixel function. Improper use of this function could cause an application calling it to function improperly, possibly leading to a crash or arbitrary code execution...

EulerOS 2.0 SP2 : libXtst (EulerOS-SA-2020-1093)

According to the versions of the libXtst packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - X.Org X11 libXtst runtime librarySecurity Fixes:Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger...