Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 8 : tigervnc (RHSA-2023:7405)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7405 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

RHEL 7 : tigervnc (RHSA-2023:7428)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7428 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

RHEL 9 : tigervnc (RHSA-2023:7388)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7388 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

RHEL 9 : tigervnc (RHSA-2023:7373)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7373 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

RHEL 8 : tigervnc (RHSA-2023:7436)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7436 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

xorg-x11-server security and bug fix update

1.20.11-17 - Backport fix for a deadlock with DRI3 Resolves: rhbz2192556 1.20.11-16 - CVE fix for: CVE-2023-1393 Resolves: rhbz2180296...

Fedora 39 : tigervnc (2023-4bb75fa8f2)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4bb75fa8f2 advisory. Fixes CVEs reported against Xserver. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Oracle Linux 9 : xorg-x11-server (ELSA-2023-6340)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6340 advisory. 1.20.11-19 - Backport fix for a deadlock with DRI3 Resolves: rhbz2192550 1.20.11-18 - CVE fix for: CVE-2023-1393 Resolves: rhbz2180297 Tenable has extracted the...

Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2023-6341)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6341 advisory. 22.1.9-2 - Rebuild 2158761 22.1.9-1 - xwayland 22.1.9 2158761 21.1.3-8 - Fix CVE-2023-1393 2180299 Tenable has extracted the preceding description block directl...

Important: xorg-x11-server

Issue Overview: A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in...

ROS-20231114-02

Vulnerability of XIChangeDeviceProperty Xi/xiproperty.c and RRChangeOutputProperty functions randr/rrrproperty.c of X Window System Xorg-server is related to the possibility of writing outside the boundaries of the buffer in memory. Exploitation of the vulnerability could allow an attacker to cau...

The vulnerability of the XkbCopyNames function in the Wayland protocol for X.Org XWayland, which is part of the X.Org Server, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XkbCopyNames function in the Wayland protocol for X.Org XWayland, which is part of the X.Org Server for the X Window System, relates to the use of memory after it is freed. Exploiting this vulnerability allows a perpetrator to access confidential data, compromise its...

CentOS 8 : xorg-x11-server (CESA-2023:6916)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:6916 advisory. - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overl...

CentOS 8 : xorg-x11-server-Xwayland (CESA-2023:6917)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:6917 advisory. - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overl...

xorg-x11-server-Xwayland security, bug fix, and enhancement update

22.1.9-2 - Rebuild 2158761 22.1.9-1 - xwayland 22.1.9 2158761 21.1.3-8 - Fix CVE-2023-1393 2180299...

xorg-x11-server security and bug fix update

1.20.11-19 - Backport fix for a deadlock with DRI3 Resolves: rhbz2192550 1.20.11-18 - CVE fix for: CVE-2023-1393 Resolves: rhbz2180297...

[SECURITY] Fedora 37 Update: xorg-x11-server-1.20.14-26.fc37

X.Org X11 X server...

Fedora: Security Advisory for xorg-x11-server-Xwayland (FEDORA-2023-18cb340b28)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-f111d2f306)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...