openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1965-1)

The X server was updated to fix a possible X server crash using invalid trapezoids. bnc853846 CVE-2013-6424 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-1033. The text...

openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1148-1)

This xorg-x11-server update fixes a DoS vulnerability and adds randr support. - Uos-Reset-input-buffer-s-ignoreBytes-field.patch - If a client sends a request larger than maxBigRequestSize, the server is supposed to ignore it. Before commit cf88363d, the server would simply disconnect the client...

openSUSE Security Update : xorg-x11-Xvnc (openSUSE-SU-2012:0307-1)

This update of xorg-x11-server fixes issues that could allow attackers read access to arbitrary memory locations via the GLX protocol CVE-2010-4818. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : xorg-x11 (openSUSE-SU-2011:0298-1)

Remote attackers could execute arbitrary commands as root by assigning specially crafted hostnames to X11 clients via XDMCP CVE-2011-0465. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1610-1)

Fixes the following security issue : - an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption. CVE-2013-4396, bnc843652 and the following bug was fixed too : - rfbAuthReenable is accessing rfbClient structure that wa...

openSUSE Security Update : xorg-x11-Xvnc (openSUSE-SU-2012:0227-1)

The X server had two security issues and one bug that is fixed by this update. CVE-2011-4028: It is possible for a local attacker to deduce if a file exists or not by exploiting the way that Xorg creates its lock files. CVE-2011-4029: It is possible for a non-root local user to set the read...

openSUSE Security Update : dbus-1 / dbus-1-x11 (openSUSE-SU-2012:1418-1)

6 vulnerabilities were discovered for the dbus-1 and dbus-1-x11 packages in openSUSE versions 11.4, 12.1, and 12.2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-750. The text...

openSUSE Security Update : xorg-x11-Xvnc (openSUSE-SU-2010:0561-1)

The X.Org X11 Server was updated to fix several bugs and 2 security issues : Two security issues were fixed: CVE-2010-2240: This fix adds a workaround for overlapping stacks and heaps in case of OOM conditions.This workaround is necessary if the kernel is not properly adding guard or gap-pages...

SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 9272)

xorg-x11-libs was patched to fix the following security issues : - Integer overflow of allocations in font metadata file parsing. CVE-2014-0209 - libxfont not validating length fields when parsing xfs protocol replies. CVE-2014-0210 - Integer overflows causing miscalculating memory needs for xfs...

AIX 6.1 TL 9 : X11.base.rte (U860216)

The remote host is missing AIX PTF U860216, which is related to the security of the package X11.base.rte. Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service...

AIX 7.1 TL 3 : X11.base.rte (U860289)

The remote host is missing AIX PTF U860289, which is related to the security of the package X11.base.rte. Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service...

SUSE-SU-2015:0674-1 Security update for xorg-x11-libs

xorg-x11-libs was patched to fix the following security issues: Integer overflow of allocations in font metadata file parsing. CVE-2014-0209 libxfont not validating length fields when parsing xfs protocol replies. CVE-2014-0210 Integer overflows causing miscalculating memory needs for xfs replies...

DEBIAN-CVE-2012-0871

The sessionlinkx11socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/...

CVE-2012-0871

The sessionlinkx11socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/...

CVE-2012-0871

CVE-2012-0871 concerns systemd-logind’s session_link_x11_socket vulnerability in systemd (possibly 37 and earlier). A local user can exploit a symlink attack on /run/user/ to create or overwrite arbitrary files via login/logind-session.c. Multiple sources confirm the issue and describe affected c...

CVE-2012-0871

The sessionlinkx11socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/...

AIX OpenSSH Advisory: openssh_advisory.asc

The version of OpenSSH running on the remote host is affected by the following vulnerabilities : - X11 man-in-the-middle attack: When attempting to bind2 to a port that has previously been bound with SOREUSEADDR set, most operating systems check that either the effective user-id matches the...

libXfont: Multiple vulnerabilities

Background libXfont is an X11 font rasterisation library. Description Multiple vulnerabilities have been discovered in libXfont. Please review the CVE identifiers referenced below for details. Impact A local attacker could use a specially crafted file to gain privileges or cause a Denial of Servi...

SuSE 11.2 / 11.3 Security Update : xorg-x11 (SAT Patch Numbers 8723 / 8724)

This update fixes a stack-based buffer overflow in xorg-x11 in the function bdfReadCharacters. CVE-2013-6462 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

Fedora Update for libXfont FEDORA-2014-0443

Check for the Version of libXfont OpenVAS Vulnerability Test Fedora Update for libXfont FEDORA-2014-0443 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...