The vulnerability of the ProcXIPassiveGrabDevice() function in the X Window System Xorg-server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ProcXIPassiveGrabDevice function in the X Window System Xorg-server lies in the possibility of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service...

Amazon Linux 2 : xorg-x11-server (ALAS-2024-2511)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2511 advisory. A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially...

Important: xorg-x11-server

Issue Overview: A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a clie...

CVE-2023-1393 affecting package xorg-x11-server for versions less than 1.20.10-4

CVE-2023-1393 affecting package xorg-x11-server for versions less than 1.20.10-4. A patched version of the package is available...

Amazon Linux AMI : tigervnc (ALAS-2024-1927)

The version of tigervnc installed on the remote host is prior to 1.8.0-21.36. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1927 advisory. The ProcRenderAddGlyphs function calls the AllocateGlyph function to store new glyphs sent by the client to the X server...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2024-583)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-583 advisory. A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially...

openSUSE Security Advisory (SUSE-SU-2024:1262-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : xorg-x11-server (ALAS-2024-1928)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1928 advisory. The ProcRenderAddGlyphs function calls the AllocateGlyph function to store new glyphs sent by the client to the X server. AllocateGlyph would return a new glyph with refcount=0 and a re-used glyph would en...

Important: xorg-x11-server

Issue Overview: A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a clie...

[SECURITY] [DLA 3787-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3787-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 15, 2024 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DSA-5657-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3787-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-3787-1 xorg-server - security update

Bulletin has no description...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2024:1263-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1263-1 advisory. - Fixed regression for security fix bsc1222312 for CVE-2024-31083 when using Android Studio bsc1222442 Tenable has extracted the preceding...

[SECURITY] [DSA 5657-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5657-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 12, 2024 https://www.debian.org/security/faq -...

SUSE-SU-2024:1263-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - Fixed regression for security fix bsc1222312 for CVE-2024-31083 when using Android Studio bsc1222442...

SUSE-SU-2024:1262-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length bsc1222309. - CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply bsc1222310. - CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use...

SUSE-SU-2024:1261-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length bsc1222309. - CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply bsc1222310. - CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use...

SUSE-SU-2024:1260-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length bsc1222309. - CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply bsc1222310. - CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use...

OESA-2024-1416 xorg-x11-server security update

X.Org X11 X server Security Fixes: A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when...