SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xwayland (SUSE-SU-2023:4792-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4792-1 advisory. - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions bsc1217765. -...

USN-6555-2 xorg-server vulnerabilities

USN-6555-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled XKB button actions. An attacker could possibly use this iss...

USN-6555-1 xorg-server, xwayland vulnerabilities

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled XKB button actions. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. CVE-2023-6377 Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled...

AZL-32179 CVE-2023-6377 affecting package xorg-x11-server for versions less than 1.20.10-5

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

DEBIAN-CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

CVE-2023-6377 Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved. Mitigation...

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

The vulnerability of the ProcXkbGetKbdByName function in the xkb/xkb.c component of the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, allows a malicious actor to cause a service failure.

The vulnerability of the ProcXkbGetKbdByName function in the xkb/xkb.c component of the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote...

The vulnerability of the XkbCopyNames function in the Wayland protocol for X.Org XWayland, which is part of the X.Org Server, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XkbCopyNames function in the Wayland protocol for X.Org XWayland, which is part of the X.Org Server for the X Window System, relates to the use of memory after it is freed. Exploiting this vulnerability allows a perpetrator to access confidential data, compromise its...

The vulnerability of the GetCountedString function in the xkb/xkb.c component of the X Window System X.Org Server, as well as in the Wayland protocol for X.Org XWayland, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GetCountedString function in the xkb/xkb.c component of the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to acce...

Libx11: out-of-bounds memory access in _xkbreadkeysyms()

...

xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c

A flaw was found in the xorg-x11-server package. The ProcXkbGetKbdByName function in xkb/xkb.c does not release allocated data when an error is encountered, allowing for a memory leak...

xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c

A flaw was found in the xorg-x11-server package. A buffer overflow can occur in the GetCountedString function in xkb/xkb.c due to improper input validation, allowing for possible escalation of privileges, execution of arbitrary code, or a denial of service...

xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c

A flaw was found in the xorg-x11-server package. The ProcXkbGetKbdByName function in xkb/xkb.c does not release allocated data when an error is encountered, allowing for a memory leak...

xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c

A flaw was found in the xorg-x11-server package. A buffer overflow can occur in the GetCountedString function in xkb/xkb.c due to improper input validation, allowing for possible escalation of privileges, execution of arbitrary code, or a denial of service...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2023-1419)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...