FreeBSD : xorg-server -- use-after-free (9a57c607-3cab-11e3-b4d9-bcaec565249c)

Alan Coopersmith reports : Pedro Ribeiro pedrib at gmail.com reported an issue to the X.Org security team in which an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption. %NASLMINLEVEL 70300 C Tenable Network Securit...

Debian DSA-2784-1 : xorg-server - use-after-free

Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] [DSA 2784-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2784-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 22, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2784-1 (xorg-server - use-after-free)

Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation. OpenVAS Vulnerability Test $Id: deb2784.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2784-1 using...

DSA-2784-1 xorg-server - use-after-free

Bulletin has no description...

Debian: Security Advisory (DSA-2784-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for xorg-x11-server-common CESA-2013:1426 centos6

Check for the Version of xorg-x11-server-common OpenVAS Vulnerability Test CentOS Update for xorg-x11-server-common CESA-2013:1426 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Ubuntu 12.04 LTS / 12.10 / 13.04 : xorg-server, xorg-server-lts-quantal, xorg-server-lts-raring vulnerabilities (USN-1990-1)

Pedro Ribeiro discovered that the X.Org X server incorrectly handled memory operations when handling ImageText requests. An attacker could use this issue to cause X.Org to crash, or to possibly execute arbitrary code. CVE-2013-4396 It was discovered that non-root X.Org X servers such as Xephyr...

CentOS Update for xorg-x11-server-common CESA-2013:1426 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for xorg-server USN-1990-1

Check for the Version of xorg-server OpenVAS Vulnerability Test $Id: gbubuntuUSN19901.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for xorg-server USN-1990-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

RedHat Update for xorg-x11-server RHSA-2013:1426-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 / 6 : xorg-x11-server (CESA-2013:1426)

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : xorg-x11-server on SL5.x, SL6.x i386/x86_64 (20131015)

A use-after-free flaw was found in the way the X.Org server handled ImageText requests. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges. CVE-2013-4396 Users of proprietary drivers may need to reinstall the...

Oracle Linux 5 / 6 : xorg-x11-server (ELSA-2013-1426)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1426 advisory. 1.13.0-11.1.2 - CVE-2013-4396: Fix use-after free in ImageText requests 1014561 Tenable has extracted the preceding description block directly from the Orac...

RHEL 5 / 6 : xorg-x11-server (RHSA-2013:1426)

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

xorg security update

CentOS Errata and Security Advisory CESA-2013:1426 Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring Syst...

Important: Red Hat Security Advisory: xorg-x11-server security update

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

xorg-x11-server: use-after-free flaw when handling ImageText requests

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/xorg-server-1.12.4-i486-2slack14.0.txz: Rebuilt. Patched a use-after-free bug that can cause an ...