Debian: Security Advisory (DLA-3372-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1393

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window aka COW, the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-fr...

AZL-44478 CVE-2023-1393 affecting package xorg-x11-server for versions less than 1.20.10-6

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window aka COW, the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-fr...

DEBIAN-CVE-2023-1393

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window aka COW, the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-fr...

Debian: Security Advisory (DSA-5380-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2023-088-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current xorg-server Vulnerability (SSA:2023-088-02)

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.4 / 21.1.8 / 23.1.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-088-02 advisory. - Fix for CVE-2023-1393 CVE-2023-1393 Note that Nessus has not tested for this issue but has instead...

Ubuntu: Security Advisory (USN-5986-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-8slack15.0.txz: Rebuilt. PATCH composite: Fix use-after-free of the COW. Fix use-after-free that can le...

[SECURITY] [DLA 3372-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3372-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 29, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5380-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5380-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2023 https://www.debian.org/security/faq -...

DLA-3372-1 xorg-server - security update

Bulletin has no description...

FreeBSD : xorg-server -- Overlay Window Use-After-Free (96d84238-b500-490b-b6aa-2b77090a0410)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 96d84238-b500-490b-b6aa-2b77090a0410 advisory. - Fix for CVE-2023-1393 CVE-2023-1393 Note that Nessus has not tested for this issue but has instead...

Debian: Security Advisory (DLA-218-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1186-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-120)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() functions in the X.Org Server software, which relates to the use of memory after it is freed, allows a attacker to execute arbitrary code.

The vulnerability of the ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo functions in the X.Org Server software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Ubuntu: Security Advisory (USN-5778-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5778-2 xorg-server, xorg-server-hwe-16.04 vulnerabilities

USN-5778-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that X.Org X Server extensions contained multiple security issues. An attacker could possibly use these...

SUSE CVE-2006-0745

X.Org server xorg-server 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and 1 execute arbitrary code via the -modulepath command line optio...