The vulnerability of the GetCountedString function in the xkb/xkb.c component of the X Window System X.Org Server, as well as in the Wayland protocol for X.Org XWayland, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GetCountedString function in the xkb/xkb.c component of the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to acce...

The vulnerabilities of the ProcXIChangeProperty and ProcXChangeDeviceProperty functions in the X Window System X.Org Server, as well as those in the Wayland protocol for X.Org XWayland, allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ProcXIChangeProperty and ProcXChangeDeviceProperty functions in the X Window System X.Org Server, as well as the Wayland protocol for X.Org and XWayland, is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows a remote attack...

xorg-x11-server-Xwayland security, bug fix, and enhancement update

22.1.9-2 - Rebuild 2158761 22.1.9-1 - xwayland 22.1.9 2158761 21.1.3-8 - Fix CVE-2023-1393 2180299...

[SECURITY] Fedora 37 Update: xorg-x11-server-Xwayland-22.1.9-3.fc37

Xwayland is an X server for running X clients under Wayland...

Fedora: Security Advisory for xorg-x11-server-Xwayland (FEDORA-2023-18cb340b28)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : xorg-x11-server-Xwayland (2023-18cb340b28)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-18cb340b28 advisory. Security fix for CVE-2023-5367 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Moderate: Red Hat Security Advisory: xorg-x11-server-Xwayland security, bug fix, and enhancement update

An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ALSA-2023:6341 Moderate: xorg-x11-server-Xwayland security, bug fix, and enhancement update

Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland 22.1.9. BZ2158761 Security Fixes: xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability...

Fedora: Security Advisory (FEDORA-2023-2eb445d52b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: xorg-x11-server-Xwayland security, bug fix, and enhancement update

Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland 22.1.9. BZ2158761 Security Fixes: xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability...

RHEL 9 : xorg-x11-server-Xwayland (RHSA-2023:6341)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6341 advisory. Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream version:...

Fedora 39 : xorg-x11-server-Xwayland (2023-2eb445d52b)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2eb445d52b advisory. Xwayland 23.2.2 ---- Security fix for CVE-2023-5367 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Mageia: Security Advisory (MGASA-2023-0307)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: xorg-x11-server-Xwayland-23.2.2-1.fc39

Xwayland is an X server for running X clients under Wayland...

Rocky Linux 9 : xorg-x11-server-Xwayland (RLSA-2022:8222)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8222 advisory. - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the...

Rocky Linux 8 : xorg-x11-server and xorg-x11-server-Xwayland (RLSA-2022:7583)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7583 advisory. - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xwayland (SUSE-SU-2023:4306-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4306-1 advisory. - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage...

Ubuntu: Security Advisory (USN-6453-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4306-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol bsc1216261. - CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols bsc1216135...

SUSE-SU-2023:4293-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol bsc1216261. - CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols bsc1216135...