OESA-2023-1239 xorg-x11-server security update

X.Org X11 X server. Security Fixes: A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window aka COW, the Xserver would leave a dangling pointer to that window in the CompScreen structur...

Advisory ROSA-SA-2023-2153

Software: xorg-x11-server 1.20.4 OS: rosa-server79 packageevrstring: 1.20.4-23 CVE-ID: CVE-2023-1393 BDU-ID: None CVE-Crit: HIGH CVE-DESC: Use-After-Free can result in elevated local privileges. If a client explicitly destroys a linker overlay window also known as COW, Xserver will leave a dangli...

Fedora: Security Advisory for xorg-x11-server-Xwayland (FEDORA-2023-239bae4b57)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-fe18ae3e85)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerability in xorg-x11-libXdmcp affects IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in xorg-x11-libXdmcp. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in xorg-x11-libXdmcp. Vulnerability Details CVEID:...

NewStart CGSL CORE 5.05 / MAIN 5.05 : xorg-x11-drv-ati Multiple Vulnerabilities (NS-SA-2023-0026)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has xorg-x11-drv-ati packages installed that are affected by multiple vulnerabilities: - An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt8

2:1.20.14-alt8 built April 5, 2023 Valery Inozemtsev in task 317705 March 29, 2023 Valery Inozemtsev - cherry pick upstream fixes for CVE-2023-1393...

xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability

A vulnerability was found in X.Org Server. This flaw occurs if a client explicitly destroys the compositor overlay window aka COW, where Xserver leaves a dangling pointer to that window in the CompScreen structure, which will later trigger a use-after-free issue. The Overlay Window use-after-free...

xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability

A vulnerability was found in X.Org Server. This flaw occurs if a client explicitly destroys the compositor overlay window aka COW, where Xserver leaves a dangling pointer to that window in the CompScreen structure, which will later trigger a use-after-free issue. The Overlay Window use-after-free...

tigervnc and xorg-x11-server security update

tigervnc 1.8.0-25 - CVE fix for: CVE-2023-1393 Resolves: bz2180291 xorg-x11-server 1.20.4-23 - CVE fix for: CVE-2023-1393 2180290...

Oracle Linux 7 : tigervnc / and / xorg-x11-server (ELSA-2023-1594)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1594 advisory. - CVE fix for: CVE-2023-1393 Resolves: bz2180291 xorg-x11-server Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHEL 7 : tigervnc and xorg-x11-server (RHSA-2023:1594)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1594 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

RHEL 8 : tigervnc (RHSA-2023:1600)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1600 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability

A vulnerability was found in X.Org Server. This flaw occurs if a client explicitly destroys the compositor overlay window aka COW, where Xserver leaves a dangling pointer to that window in the CompScreen structure, which will later trigger a use-after-free issue. The Overlay Window use-after-free...

Debian dla-3372 : xdmx - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3372 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3372-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3372-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1393

...

[SECURITY] Fedora 38 Update: xorg-x11-server-1.20.14-21.fc38

X.Org X11 X server...

Fedora 38 : xorg-x11-server (2023-b7835960ac)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b7835960ac advisory. Fix for CVE-2023-1393 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-b7835960ac)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...