5305 matches found
Fedora 25 : 1:xrdp / xorgxrdp (2017-7bd002b77c)
New upstream version of xorgxrdp and xrdp : New features in xrdp : - RemoteFX codec support is now enabled by default. - Bitmap updates support is now enabled by default. - TLS ciphers suites and version is now logged. - Connected computer name is now logged. - Switched to Xorg xorgxrdp as the...
Oracle Linux 6 : tigervnc (ELSA-2017-0630)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0630 advisory. 1.1.0-24 - Proper global init/deinit of GnuTLS Resolves: bz1418946 1.1.0-23 - Fix buffer overflow in FullFramePixelBuffer::fillRect Resolves: bz1416289...
SUSE SLES11 Security Update : xorg-x11-libX11 (SUSE-SU-2017:0644-1)
This update for xorg-x11-libX11 fixes the following issues : - a regression introduced by the security fix for CVE-2013-1997 bnc824294. Keyboard mappings for special characters on Non-English keyboards might have been broken. bnc1019642 Note that Tenable Network Security has extracted the precedi...
SUSE-SU-2017:0644-1 Security update for xorg-x11-libX11
This update for xorg-x11-libX11 fixes the following issues: - a regression introduced by the security fix for CVE-2013-1997 bnc824294. Keyboard mappings for special characters on Non-English keyboards might have been broken. bnc1019642...
X.org X Server Local Privilege Expansion Vulnerability
X.Org X Server is an X Window System display server from the X.Org Foundation. A security vulnerability exists in X.org X Server. An attacker could exploit the vulnerability to run code in another user's Xorg session...
X.org Privilege Escalation / Use-After-Free / Weak Entropy Vulnerabilities
Exploit for windows platform in category local exploits Multiple Vulnerabilities in X.org ================================= Overview -------- Vendor: X.org/Freedesktop.org Vendor URL: https://www.x.org/wiki/ Credit: X41 D-Sec GmbH, Eric Sesterhenn Advisory-URL:...
X.org Privilege Escalation / Use-After-Free / Weak Entropy
X41 D-Sec GmbH Security Advisory: X41-2017-001 Multiple Vulnerabilities in X.org ================================= Overview -------- Vendor: X.org/Freedesktop.org Vendor URL: https://www.x.org/wiki/ Credit: X41 D-Sec GmbH, Eric Sesterhenn Advisory-URL:...
CVE-2017-2624
It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...
UBUNTU-CVE-2017-2624
It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...
CVE-2017-2624
It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...
SUSE SLES11 Security Update : xorg-x11-libXpm (SUSE-SU-2017:0470-1)
This update for xorg-x11-libXpm fixes the following security issue : - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315 Note that Tenable Network Security has extracted the preceding description block directly from the...
SUSE-SU-2017:0470-1 Security update for xorg-x11-libXpm
This update for xorg-x11-libXpm fixes the following security issue: - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315...
openSUSE Security Update : tigervnc (openSUSE-2017-243)
This update for tigervnc fixes the following issues : This security issue was fixed : - CVE-2016-10207: Prevent crash caused by failed TLS connection bnc1023012 This non-security issue was fixed : - Fix random client disconnections boo1022432 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
SUSE SLES11 Security Update : xorg-x11-libXfixes (SUSE-SU-2016:3172-1)
This update for xorg-x11-libXfixes fixes the following issues : - insufficient validation of data from the X server can cause an integer overflow on 32 bit architectures bsc1002995, CVE-2016-7944 Note that Tenable Network Security has extracted the preceding description block directly from the SU...
SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2016:3189-1)
This update for xorg-x11-libs fixes the following issues : - insufficient validation of data from the X server can cause a one byte buffer read underrun bsc1003023, CVE-2016-7953 - insufficient validation of data from the X server can cause out of boundary memory access or endless loops Denial of...
SUSE-SU-2016:3189-1 Security update for xorg-x11-libs
This update for xorg-x11-libs fixes the following issues: - insufficient validation of data from the X server can cause a one byte buffer read underrun bsc1003023, CVE-2016-7953 - insufficient validation of data from the X server can cause out of boundary memory access or endless loops Denial of...
SUSE-SU-2016:3172-1 Security update for xorg-x11-libXfixes
This update for xorg-x11-libXfixes fixes the following issues: - insufficient validation of data from the X server can cause an integer overflow on 32 bit architectures bsc1002995, CVE-2016-7944...
SUSE SLES11 Security Update : xorg-x11-libXrender (SUSE-SU-2016:3115-1)
This update for xorg-x11-libXrender fixes the following issues : - insufficient validation of data from the X server can cause out of boundary memory writes bsc1003002, CVE-2016-7949, CVE-2016-7950 Note that Tenable Network Security has extracted the preceding description block directly from the...
SUSE SLES11 Security Update : xorg-x11-libXv (SUSE-SU-2016:3110-1)
This update for xorg-x11-libXv fixes the following issues : - insufficient validation of data from the X server can cause memory corruption bsc1003017, CVE-2016-5407 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...