Amazon Linux 2023 : tigervnc, tigervnc-icons, tigervnc-license (ALAS2023-2026-3262)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3262 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of modifie...

CVE-2026-93516

XInput Passive Grab modifierDevice Use-After-Free...

UBUNTU-CVE-2026-93516

XInput Passive Grab modifierDevice Use-After-Free...

EUVD-2007-6393

Malware in sbrugna...

EUVD-2014-7942

Malware in sbrugna...

SUSE CVE-2007-6427

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990...

USN-4905-2: X.Org X Server vulnerability

USN-4905-1 fixed a vulnerability in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain lengths of XInput extension ChangeFeedbackControl requests. An attacker could us...

USN-4905-2 xorg-server vulnerability

USN-4905-1 fixed a vulnerability in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain lengths of XInput extension ChangeFeedbackControl requests. An attacker could us...

GLSA-202104-02 : X.Org X Server: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202104-02 X.Org X Server: Privilege escalation It was discovered that X.Org X Server did not sufficiently check the length of the XInput extensions ChangeFeedbackControl request. Impact : An authorized attacker could possibly...

X.Org X Server: Privilege escalation

Background The X Window System is a graphical windowing system based on a client/server model. Description It was discovered that X.Org X Server did not sufficiently check the length of the XInput extension’s ChangeFeedbackControl request. Impact An authorized attacker could possibly escalate...

Debian DSA-4893-1 : xorg-server - security update

Jan-Niklas Sohn discovered that missing input sanitising in the XInput extension of the X.org X server may result in privilege escalation if the X server is running privileged. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

[SECURITY] [DSA 4893-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4893-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 19, 2021 https://www.debian.org/security/faq -...

MGASA-2021-0190 Updated x11-server packages fix security vulnerability

Insufficient checks on the lengths of the XInput extension ChangeFeedbackControl request can lead to out of bounds memory accesses in the X server. These issues can lead to privilege escalation for authorized clients on systems where the X server is running privileged CVE-2021-3472...

FreeBSD : xorg-server -- Input validation failures in X server XInput extension (465db5b6-9c6d-11eb-8e8a-bc542f4bd1dd)

X.Org server security reports for release 1.20.11 : - Fix XChangeFeedbackControl request underflow . C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors...

USN-4905-1 xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerability

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain lengths of XInput extension ChangeFeedbackControl requests. An attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-4905-1: X.Org X Server vulnerability

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain lengths of XInput extension ChangeFeedbackControl requests. An attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code...

PT-2021-3619

Name of the Vulnerable Software and Affected Versions xorg-x11-server versions prior to 1.20.11 Description A flaw was found in xorg-x11-server, where an integer underflow can occur in xserver, leading to a local privilege escalation. The highest threat from this issue is to data confidentiality...

Patriot-Linux - Host IDS For Desktop Users

Patriot Linux is a HIDS for desktop users who wants real time graphical alerts when something suspicious happens Patriot detect: 1- Suspicious process running 2- New process starting TCP/IP Connection 3- Auditd alerts 4- New keyboards plugged Installation You need to configure Auditd with this...

Security Bulletin: Multiple vulnerabilities in xorg-x11-server affect IBM Flex System Manager (FSM)

Summary There are multiple vulnerabilities in xorg-x11-server that is used by IBM Flex System Manager FSM. This bulletin addresses these vulnerabilities. Vulnerability Details Summary There are multiple vulnerabilities in xorg-x11-server that is used by IBM Flex System Manager FSM. This bulletin...