5327 matches found
The vulnerability of the ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() functions in the X.Org Server software, which relates to the use of memory after it is freed, allows a attacker to execute arbitrary code.
The vulnerability of the ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo functions in the X.Org Server software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Advisory ROSA-SA-2023-2125
Software: xorg-x11-server 1.20.4 OS: rosa-server79 packageevrstring: xorg-x11-server-common-1.20.4-16. CVE-ID: CVE-2023-0494 BDU-ID: None CVE-Crit: HIGH CVE-DESC: A vulnerability has been discovered in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be used b...
Amazon Linux AMI : xorg-x11-server (ALAS-2023-1689)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1689 advisory. A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data,...
Fedora: Security Advisory for xorg-x11-server-Xwayland (FEDORA-2023-1ebf4507df)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-fb5022e741)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 36 : xorg-x11-server-Xwayland (2023-1ebf4507df)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1ebf4507df advisory. xwayland 22.1.8 - Security fix for CVE-2023-0494 Tenable has extracted the preceding description block directly from the Fedora security advisory...
Fedora 36 : xorg-x11-server (2023-fb5022e741)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-fb5022e741 advisory. CVE-2023-0494: potential use-after-free in DeepCopyPointerClasses Tenable has extracted the preceding description block directly from the Fedora security...
Important: xorg-x11-server
Issue Overview: A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw...
CentOS 7 : tigervnc and xorg-x11-server (RHSA-2023:0675)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0675 advisory. - A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and...
Ubuntu: Security Advisory (USN-5778-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5778-2 xorg-server, xorg-server-hwe-16.04 vulnerabilities
USN-5778-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that X.Org X Server extensions contained multiple security issues. An attacker could possibly use these...
RLSA-2023:0622 Important: tigervnc security update
Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...
tigervnc security update
An update is available for tigervnc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virtual Network Computing VNC is a remote display system which allows users ...
RLSA-2023:0662 Important: tigervnc security update
Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...
SUSE CVE-2006-0745
X.Org server xorg-server 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and 1 execute arbitrary code via the -modulepath command line optio...
SUSE CVE-2006-6103
Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures...
SUSE CVE-2007-1003
Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...
SUSE CVE-2007-1351
Integer overflow in the bdfReadCharacters function in bdfread.c in 1 X.Org libXfont before 20070403 and 2 freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow...
SUSE CVE-2007-1667
Multiple integer overflows in 1 the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and 2 XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service crash or obtain sensitive information via crafted images with large or negative...