1508 matches found
Astra Linux – vulnerability in xwayland, xorg-server
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, which may lead to an integer overflow and result in bypassing the size check...
Astra Linux – vulnerability in xwayland, xorg-server
A buffer overflow vulnerability was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-size buffer on the stack and copies the names of virtual modifiers into that buffer. The code fails to check the buffer’s boundaries and copies data regardless of its size...
Astra Linux – vulnerability in xorg-server
A flaw was found in the X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or...
Astra Linux – Vulnerability in xorg-server
A vulnerability was discovered in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where X is used...
Astra Linux – Vulnerability in xorg-server
A vulnerability was discovered in X.Org. This security flaw arises because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where the X server is running with privileged access, and may...
Astra Linux – Vulnerability in xorg-server
A use-after-free flaw was discovered in the X.Org X server and Xwayland in the CreateSaverWindow function. A client can trigger a use-after-free error after changing window attributes and forcing the screen saver, resulting in information disclosure...
Astra Linux – Vulnerability in xwayland, xorg-server
A flaw was discovered in the handling of animated cursors by the X Rendering extension. If a client does not provide any cursors, the server assumes that at least one is present. This can lead to an out-of-bounds read and potential crash...
Astra Linux – Vulnerability in xorg-server
A use-after-free vulnerability was discovered in the ProcRenderAddGlyphs function of Xorg servers. This issue arises when the AllocateGlyph function is called to store new glyphs sent by the client to the X server. As a result, multiple entries may point to the same non-refcounted glyphs...
Astra Linux – Vulnerability in xorg-server
A out-of-bounds read flaw was discovered in the X.Org X server and Xwayland within the glXDispChangeDrawableAttributes function. A incorrect size validation check allows a client-controlled number of bytes to be read, exceeding the request buffer, resulting in information disclosure. A write path...
Astra Linux – Vulnerability in xorg-server
A out-of-bounds write flaw was discovered in the X.Org X server and Xwayland within DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger a out-of-bounds heap write. This vulnerability could be exploited to...
Astra Linux – Vulnerability in xwayland, xorg-server
A flaw was discovered in the X.Org X server’s validation of XKB key type requests. A local attacker could send a specially crafted request to the X server, leading to a vulnerability where out-of-bounds memory access could occur. This could result in the disclosure of sensitive information or cau...
Astra Linux – vulnerability in xorg-server
A stack-based buffer overflow vulnerability has been identified in the X.Org X server and Xwayland. An inconsistency between the X server’s maximum allowable length for font names and the libXfont2 library’s limits can lead to a stack buffer overflow during font alias resolution. The server...
ROOT-OS-DEBIAN-11-CVE-2026-56000 CVE-2026-56000 in xorg-server - Patched by Root
Root has patched CVE-2026-56000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-55999 CVE-2026-55999 in xorg-server - Patched by Root
Root has patched CVE-2026-55999 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-5574 CVE-2023-5574 in xorg-server - Patched by Root
Root has patched CVE-2023-5574 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...
Slackware Linux 15.0 / current xorg-server Multiple Vulnerabilities (SSA:2026-280-01)
The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.25 / 21.1.4 / 24.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-280-01 advisory. New xorg-server packages are available for Slackware 15.0 and -current to fix security...
[slackware-security] xorg-server
New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-22slack15.0.txz: Rebuilt. This update fixes security issues: XKB SetGeometry TextDoodad Double Free...
ROOT-OS-DEBIAN-11-CVE-2026-50264 CVE-2026-50264 in xorg-server - Patched by Root
Root has patched CVE-2026-50264 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...