Debian DSA-2822-1 : xorg-server - integer underflow

Bryan Quigley discovered an integer underflow in the Xorg X server which could lead to denial of service or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

[SECURITY] [DSA 2822-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2822-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2822-1 (xorg-server - integer underflow)

Bryan Quigley discovered an integer underflow in the Xorg X server which could lead to denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2822.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2822-1 using nvtgen 1.0 Script version: 1...

DSA-2822-1 xorg-server - integer underflow

Bulletin has no description...

Debian: Security Advisory (DSA-2822-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty...

DEBIAN-CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

[SECURITY] [DSA 2784-1] xorg-server security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2784-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 22, 2013 http://www.debian.org/security/faq -...

FreeBSD : xorg-server -- use-after-free (9a57c607-3cab-11e3-b4d9-bcaec565249c)

Alan Coopersmith reports : Pedro Ribeiro pedrib at gmail.com reported an issue to the X.Org security team in which an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption. %NASLMINLEVEL 70300 C Tenable Network Securit...

Debian DSA-2784-1 : xorg-server - use-after-free

Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] [DSA 2784-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2784-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 22, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2784-1 (xorg-server - use-after-free)

Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation. OpenVAS Vulnerability Test $Id: deb2784.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2784-1 using...

Debian: Security Advisory (DSA-2784-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.04 : xorg-server, xorg-server-lts-quantal, xorg-server-lts-raring vulnerabilities (USN-1990-1)

Pedro Ribeiro discovered that the X.Org X server incorrectly handled memory operations when handling ImageText requests. An attacker could use this issue to cause X.Org to crash, or to possibly execute arbitrary code. CVE-2013-4396 It was discovered that non-root X.Org X servers such as Xephyr...

Ubuntu: Security Advisory (USN-1990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for xorg-server USN-1990-1

Check for the Version of xorg-server OpenVAS Vulnerability Test $Id: gbubuntuUSN19901.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for xorg-server USN-1990-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/xorg-server-1.12.4-i486-2slack14.0.txz: Rebuilt. Patched a use-after-free bug that can cause an ...

Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : xorg-server (SSA:2013-287-05)

New xorg-server packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-287-05...

CVE-2013-4396

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

CVE-2013-4396

CVE-2013-4396 describes a use-after-free in the X.Org X11 server’s ImageText handling (dix/dixfonts.c: doImageText) that affects xorg-server before 1.14.4. A crafted ImageText request could trigger memory-allocation failure, enabling remote authenticated users to cause a daemon crash or potential...