1427 matches found
Debian: Security Advisory (DLA-2359-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2359-1 : xorg-server security update
Several issues have been found in xorg-server, the X server from xorg. Basically all issues are out-of-bounds access or integer underflows in different request handlers. One CVE is about a leak of uninitialize heap memory to clients. For Debian 9 stretch, these problems have been fixed in version...
[SECURITY] [DLA 2359-1] xorg-server security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2359-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 30, 2020 https://wiki.debian.org/LTS -...
DLA-2359-1 xorg-server - security update
Bulletin has no description...
UBUNTU-CVE-2020-14361
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
UBUNTU-CVE-2020-14362
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
FreeBSD : xorg-server -- Multiple input validation failures in X server extensions (ffa15b3b-e6f6-11ea-8cbf-54e1ad3d6335)
The X.org project reports : All theses issuses can lead to local privileges elevation on systems where the X server is running privileged. The handler for the XkbSetNames request does not validate the request length before accessing its contents. An integer underflow exists in the handler for the...
Security fix for the ALT Linux 10 package xorg-server version 2:1.20.9-alt1
Aug. 25, 2020 Valery Inozemtsev 2:1.20.9-alt1 - 1.20.9 fixes: CVE-2020-14346, CVE-2020-14361, CVE-2020-1436...
The vulnerability of the X Window System Xorg-server, related to improper memory initialization, allows an attacker to cause a leak of part of the server’s memory for the Xorg-server client.
The vulnerability of the X Window System Xorg-server is related to incorrect memory initialization. Exploiting this vulnerability can allow an attacker to cause a leak of part of the server’s memory for the Xorg-server client...
Information Disclosure
xserver is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASL...
CVE-2020-14347
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable...
ALPINE-CVE-2020-14347
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable...
DEBIAN-CVE-2020-14347
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable...
CVE-2020-14347
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable...
UBUNTU-CVE-2020-14347
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable...
CVE-2020-14347
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable...
FreeBSD : xorg-server -- Pixel Data Uninitialized Memory Information Disclosure (3c7ba82a-d3fb-11ea-9aba-0c9d925bbbc0)
The X.org project reports : Allocation for pixmap data in AllocatePixmap does not initialize the memory in xserver, it leads to leak uninitialize heap memory to clients. When the X server runs with elevated privileges. This flaw can lead to ASLR bypass, which when combined with other flaws...
PT-2020-3582 · Xorg +8 · Xorg-Server +8
Name of the Vulnerable Software and Affected Versions: Xorg-server versions prior to 1.20.9 Description: A flaw was found in the way xserver memory was not properly initialized, which could leak parts of server memory to the X client. In cases where the Xorg server runs with elevated privileges,...
Medium: xorg-x11-server
Issue Overview: It was discovered that libX11 does not properly validate input coming from the server, causing XListExtensions and XGetFontPath functions to produce an invalid list of elements that in turn make XFreeExtensionsList and XFreeFontPath access invalid memory. An attacker who can eithe...