UBUNTU-CVE-2016-7952

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service infinite loop via a reply in the 1 XRecordStartOfData, 2 XRecordEndOfData, or 3 XRecordClientDied category without a client sequence and with attached data...

UBUNTU-CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

CVE-2015-3418

CVE-2015-3418 affects the X.Org Server (xserver/xorg-server) ProcPutImage function in dix/dispatch.c and is exploitable via a zero-height PutImage request. Affected with versions prior to 1.16.4 may experience denial of service (divide-by-zero) or crash. Connected documents confirm this behavior ...

SUSE-SU-2016:3115-1 Security update for xorg-x11-libXrender

This update for xorg-x11-libXrender fixes the following issues: - insufficient validation of data from the X server can cause out of boundary memory writes bsc1003002, CVE-2016-7949, CVE-2016-7950...

SUSE-SU-2016:3110-1 Security update for xorg-x11-libXv

This update for xorg-x11-libXv fixes the following issues: - insufficient validation of data from the X server can cause memory corruption bsc1003017, CVE-2016-5407...

SUSE-SU-2016:3054-1 Security update for xorg-x11-libX11

This update for xorg-x11-libX11 fixes the following issues: - plug a memory leak bsc1002991, CVE-2016-7942 - insufficient validation of data from the X server can cause out of boundary memory read XGetImage or write XListFonts bsc1002991, CVE-2016-7942...

SUSE SLES11 Security Update : xorg-x11-libX11 (SUSE-SU-2016:3054-1)

This update for xorg-x11-libX11 fixes the following issues : - plug a memory leak bsc1002991, CVE-2016-7942 - insufficient validation of data from the X server can cause out of boundary memory read XGetImage or write XListFonts bsc1002991, CVE-2016-7942 Note that Tenable Network Security has...

X.Org libXfixes Integer Overflow Vulnerability

X.Org libXfixes is a library of X11-based fixes extensions operated by the X.Org Foundation. An integer overflow vulnerability exists in X.Org libXfixes version 5.0.2 and earlier, which can be exploited to execute arbitrary code and potentially cause a denial of service...

X.Org libXtst integer overflow vulnerability (CNVD-2016-08884)

X.Org libXtst is an Xlib-based client API proprietary to the XTEST & RECORD extension operated by the X.Org Foundation. An integer overflow vulnerability exists in X.Org libXtst versions 1.2.2 and earlier, which can be exploited by an attacker to cause a denial of service...

X.Org libX11 Denial of Service Vulnerability (CNVD-2016-08893)

X.Org libX11 is an X11 X Window System client library run by the X.Org Foundation. A security vulnerability exists in X.Org libX11, which can be exploited by an attacker to cause a denial of service out-of-bounds memory read or write...

Fedora 22 : xorg-x11-server (2015-10336)

Upstream stable release of xserver 1.17.2 fix bug with glamor and overlapping copies CVE-2015-3164 Due to an omission in authentication setup, the XWayland server would start up in non-authenticating mode, meaning that any client with access to the server's UNIX socket was able to connect to the...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality of protected information

The multiple vulnerabilities in the xorg-server package of the Debian GNU/Linux operating system may lead to a violation of the confidentiality of protected information...

Fedora 23 : abrt-2.7.1-1.fc23 (2015-79c1758468)

CVE-2015-5287: ignore crashes of abrt tools if DebugLevel = 0 - CVE-2015-5273: create own random temporary directory - make crashes of processes with locked memory not-reportable - detect xorg backtraces from journald - fix the coredumpctl integration tool Note that Tenable Network Security has...

Fedora 22 : abrt-2.6.1-6.fc22 / libreport-2.6.3-1.fc22 (2015-b81f7e1e86)

Security fix for CVE-2015-5302 abrt-2.6.1-6.fc22 - doc: fix default DumpLocation in abrt.conf man page - abrt-retrace-client: use atoll for size conversion - a-a-a-ccpp-local don't delete buildids - abrt-dump-xorg: support Xorg log backtraces prefixed by EE - bodhi: fix typo in error messages...

SUSE-RU-2015:2393-1 Recommended update for xorg-x11-libs

This update for xorg-x11-libs fixes the following issues: - The original fix for CVE-2015-1804 prevented DWIDTH to be negative. However, the spec states that 'DWIDTH ... is a vector indicating the position of the next glyph's origin relative to the origin of this glyph'. Consequently, negative...

CVE-2007-2437

The X render Xrender extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service daemon crash via crafted values to the 1 XRenderCompositeTrapezoids and 2 XRenderAddTraps functions, which trigger a...

SUSE: Security Advisory for xorg-x11-libs (SUSE-SU-2015:0674-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for xorg-x11-server (SUSE-SU-2015:0045-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2007-0127)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2008-0031)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...