CVE-2023-5574

CVE-2023-5574 is a use-after-free in xorg-x11-server-Xvfb caused by a flaw in DamageDestroy/DestroyWindow when using a multi-screen Zaphod configuration. Affected is Xvfb, vulnerable during shutdown/reset when the pointer moves between screen 1 and screen 0, with potential for privilege escalatio...

CVE-2023-5380

CVE-2023-5380 is a use-after-free in the xorg-x11-server (DestroyWindow path) that can crash the X server in Zaphod mode (multi-screen with multiple protocol screens). The issue is reported within the same family of xorg-x11-server memory-safety bugs, with the given CVSSv3.1 vector indicating Loc...

CVE-2023-5367

CVE-2023-5367 is an out-of-bounds write in xorg-x11-server, caused by an incorrect calculation of a heap buffer offset in XIChangeDeviceProperty (Xi/xiproperty.c) and RRChangeOutputProperty (randr/rrproperty.c). Affects the xorg-x11-server component across multiple Linux distributions; can lead t...

CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...

CVE-2023-5367 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...

CVE-2023-5574

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be...

CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...

[SECURITY] [DLA 3631-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3631-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 25, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5534-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5534-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 25, 2023 https://www.debian.org/security/faq -...

xorg-x11-server buffer error vulnerability

xorg-x11-server is an X Window System display server from the X.org Foundation. A security vulnerability exists in xorg-x11-server that stems from an incorrect buffer offset calculation. An attacker could exploit this vulnerability to cause privilege escalation or denial of service...

CVE-2023-5574

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be...

CVE-2023-5380

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...

UBUNTU-CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...

UBUNTU-CVE-2023-5574

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be...

Debian DSA-5534-1 : xorg-server - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5534 advisory. - A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored ...

DSA-5534-1 xorg-server - security update

Bulletin has no description...

PT-2023-6429

Name of the Vulnerable Software and Affected Versions xorg-x11-server affected versions not specified Description A flaw was found in the xorg-x11-server due to an incorrect calculation of a buffer offset when copying data stored in the heap. This issue affects the XIChangeDeviceProperty function...

xorg-x11-server Resource Management Error Vulnerability

xorg-x11-server is an X Window System display server from the X.org Foundation. A security vulnerability exists in xorg-x11-server that stems from the presence of a memory reuse after release issue...

xorg-x11-server Resource Management Error Vulnerability

xorg-x11-server is an X Window System display server from the X.org Foundation. A security vulnerability exists in xorg-x11-server-Xvfb, which stems from the presence of a memory reuse after release issue...