xorg-x11-server: Use-after-free in ProcRenderAddGlyphs

A use-after-free vulnerability was found in the ProcRenderAddGlyphs function of Xorg servers. This issue occurs when AllocateGlyph is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently,...

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice CVE-2024-31081 xorg-x11-server: Use-after-free in...

RHEL 9 : xorg-x11-server (RHSA-2024:9122)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9122 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical use...

[SECURITY] Fedora 40 Update: xorg-x11-server-1.20.14-36.fc40

X.Org X11 X server...

Fedora 40 : xorg-x11-server (2024-1ab3e0f8b5)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1ab3e0f8b5 advisory. Fix for CVE-2024-9632 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora: Security Advisory (FEDORA-2024-1ab3e0f8b5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2024-2352 xorg-x11-server security update

X.Org X11 X server Security Fixes: VUL-0: CVE-2024-9632: xorg-x11-server,xwayland: Heap-based buffer overflow privilege escalation in XkbSetCompatMapCVE-2024-9632...

RockyLinux 8 : xorg-x11-server and xorg-x11-server-Xwayland (RLSA-2024:8798)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8798 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 Tenable has extracted the preceding description block...

xorg-x11-server-21.1.14-1.1 on GA media (moderate)

xorg-x11-server-21.1.14-1.1 on GA media Announcement ID: openSUSE-SU-2024:14466-1 Rating: moderate Cross-References: CVE-2024-9632 CVSS scores: CVE-2024-9632 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-9632 SUSE : 8.5...

OPENSUSE-SU-2024:14466-1 xorg-x11-server-21.1.14-1.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.14-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : xorg-x11-server and xorg-x11-server-Xwayland (RHSA-2024:8798)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8798 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user...

AlmaLinux 8 : xorg-x11-server and xorg-x11-server-Xwayland (ALSA-2024:8798)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:8798 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 Tenable has extracted the preceding description block direct...

RHSA-2005:198 Red Hat Security Advisory: xorg-x11 security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: xorg-x11-server and xorg-x11-server-Xwayland security update

An update for xorg-x11-server and xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org serv...

xorg-x11-server and xorg-x11-server-Xwayland security update

xorg-x11-server 1.20.11-25 - CVE fix for CVE-2024-9632 xorg-x11-server-Xwayland 21.1.3-17 - Fix for CVE-2024-9632 - RHEL-61995...

SUSE: Security Advisory (SUSE-SU-2024:3866-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : xorg-x11-server / and / xorg-x11-server-Xwayland (ELSA-2024-8798)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8798 advisory. - CVE fix for CVE-2024-9632 xorg-x11-server-Xwayland Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

SUSE: Security Advisory (SUSE-SU-2024:3867-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...