Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

SUSE-SU-2023:4925-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions bsc1217765...

RHEL 9 : tigervnc (RHSA-2023:7886)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7886 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

[SECURITY] Fedora 39 Update: xorg-x11-server-Xwayland-23.2.3-1.fc39

Xwayland is an X server for running X clients under Wayland...

Fedora: Security Advisory (FEDORA-2023-93940b58fd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : xorg-x11-server-Xwayland (2023-93940b58fd)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-93940b58fd advisory. xwayland 23.2.3, fixes CVE-2023-6377, CVE-2023-6478 Tenable has extracted the preceding description block directly from the Fedora security advisory...

[SECURITY] [DLA 3686-2] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3686-2 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 17, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5576-2] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5576-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2023 https://www.debian.org/security/faq -...

DLA-3686-2 xorg-server - security update

Bulletin has no description...

DSA-5576-2 xorg-server - security update

Bulletin has no description...

Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-52460bedda)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer Overflow

xwayland:sid is vulnerable to Integer Overflow. The vulnerability due to xorg-server crafted request to RRChangeProviderProperty or RRChangeOutputProperty. It leads to allow an attacker to a disclosure of sensitive information...

Debian: Security Advisory (DLA-3686-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : tigervnc / xorg-x11-server (2023-52460bedda)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-52460bedda advisory. CVE fix for: CVE-2023-6377, CVE-2023-6478 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2023-444)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-444 advisory. A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod...

SUSE CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

SUSE CVE-2023-6478

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...

SUSE SLED15: xorg-x11-server / xorg-x11-server-extra / xorg-x11-server-sdk / etc (SUSE-SU-2023:4789-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4789-1 advisory. - CVE-2023-6377: Fixed Out-of-bounds memory write in XKB button actionsbsc1217765. -...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xwayland (SUSE-SU-2023:4788-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4788-1 advisory. - CVE-2023-6377: Fixed Out-of-bounds memory write in XKB button actionsbsc1217765. -...