Important: Red Hat Security Advisory: libXfont security update

Updated libXfont packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 6 : xorg-x11-server (CESA-2013:1620)

Updated xorg-x11-server packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Scientific Linux Security Update : X11 client libraries on SL6.x i386/x86_64 (20141014)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...

libXp: Integer overflow leading to heap-based buffer overflow

Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XpGetAttributes, 2 XpGetOneAttribute, 3 XpGetPrinterList, and 4 XpQueryScreens functions...

Amazon Linux AMI : libXfont (ALAS-2014-404)

Multiple integer overflows in the 1 fsgetreply, 2 fsallocglyphs, and 3 fsreadextentinfo functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow. Multiple buffer overflows in...

Medium: libXtst

Issue Overview: Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XRecordGetContext function. Affected Packages: libXtst Issue Correction: Run yum update libXtst or yum update --adviso...

Medium: libxcb

Issue Overview: Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the readpacket function. Affected Packages: libxcb Issue Correction: Run yum update libxcb or yum update --advisory...

Medium: libXfont

Issue Overview: Multiple integer overflows in the 1 fsgetreply, 2 fsallocglyphs, and 3 fsreadextentinfo functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow. Multiple...

Medium: libXext

Issue Overview: Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XcupGetReservedColormapEntries, 2 XcupStoreColors, 3 XdbeGetVisualInfo, 4 XeviGetVisualInfo, 5...

CVE-2014-4910

Directory traversal vulnerability in tools/backlighthelper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the interface name...

CVE-2014-4910

Directory traversal vulnerability in tools/backlighthelper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the interface name...

Directory traversal

Directory traversal vulnerability in tools/backlighthelper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the interface name...

CVE-2014-4910

CVE-2014-4910 affects X.Org xf86-video-intel (notably around version 2.99.911). A directory traversal in tools/backlight_helper.c enables remote attackers to create or overwrite arbitrary files via a .. in the interface name. Several connected advisories reference the same flaw and note fixes in ...

CVE-2014-4910

Directory traversal vulnerability in tools/backlighthelper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the interface name...

CVE-2014-4910

Directory traversal vulnerability in tools/backlighthelper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the interface name...

[SECURITY] Fedora 19 Update: libXfont-1.4.8-1.fc19

X.Org X11 libXfont runtime library...

Oracle Secure Global Desktop Multiple Vulnerabilities (July 2014 CPU)

The remote host has a version of Oracle Secure Global Desktop that is version 4.63, 4.71, 5.0 or 5.1. It is, therefore, affected by the following vulnerabilities : - Apache Tomcat does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrec...

[SECURITY] Fedora 20 Update: libXfont-1.4.8-1.fc20

X.Org X11 libXfont runtime library...

X.Org X Window System Xserver 1.3 XRender Extension Divide by Zero Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23741/info X.Org X Window System Xserver is prone to a denial-of-service vulnerabilty because the software fails to properly handle exceptional conditions. Attackers who can connect to a vulnerable X server may exploit th...

openSUSE Security Update : xorg-x11-Xvnc (openSUSE-SU-2010:0561-1)

The X.Org X11 Server was updated to fix several bugs and 2 security issues : Two security issues were fixed: CVE-2010-2240: This fix adds a workaround for overlapping stacks and heaps in case of OOM conditions.This workaround is necessary if the kernel is not properly adding guard or gap-pages...