CVE-2017-13722

In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check for PCF files could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server...

CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

CVE-2015-3418

CVE-2015-3418 affects the X.Org Server (xserver/xorg-server) ProcPutImage function in dix/dispatch.c and is exploitable via a zero-height PutImage request. Affected with versions prior to 1.16.4 may experience denial of service (divide-by-zero) or crash. Connected documents confirm this behavior ...

Linux/x86 - Reverse Shell using Xterm ///usr/bin/xterm -display 127.1.1.1:10 Shellcode (68 bytes)

/ Title : Linux , Reverse Shell using Xterm , ///usr/bin/xterm -display 127.1.1.1:10 Date : 12-07-2016 Author : RTV Tested On : Ubuntu x86 shellcode :...

[SECURITY] [DLA 120-2] xorg-server regression update

Package : xorg-server Version : 2:1.7.7-18+deb6u3 CVE ID : CVE-2015-3418 Debian Bug : 774308 Andreas Cord-Landwehr reported an issue where the X.Org Xserver would often crash with an arithmetic exception when maximizing application windows. This issue CVE-2015-3418 is a regression which got...

DLA-218-1 xorg-server - security update

Bulletin has no description...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The x11-xserver-utils package in the Debian GNU/Linux operating system has multiple vulnerabilities. Exploiting these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

USN-2568-1 libx11, libxrender vulnerability

Abhishek Arya discovered that libX11 incorrectly handled memory in the MakeBigReq macro. A remote attacker could use this issue to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code. In addition, following the macro fix in libx11, a number of other...

CVE-2015-0255

X.Org X11-server (X.Org Server) is affected by CVE-2015-0255: in versions before 1.16.3 and 1.17.x before 1.17.1, a flaw in handling XkbSetGeometry requests can disclose memory or crash the server due to missing input validation. Root cause: improper validation of crafted XkbSetGeometry string le...

CVE-2014-8099

The connected documents confirm CVE-2014-8099 is among a set of X.Org X server vulnerabilities affecting the XVideo extension. The issues arise from out-of-bounds reads/writes and integer overflow when handling certain memory/length values in various Xv-related SProc and related extension functio...

CVE-2014-8092

Summary (CVE-2014-8092) : The X.Org X Server (X.Org X Window System) before version 1.16.3 is affected. The issue arises from multiple integer overflows and out-of-bounds memory access during handling of X11 core requests (notably in ProcPutImage, GetHosts, RegionSizeof, and various other functio...

CVE-2014-8098

Affected software: X.Org X Window System (X.Org Server), GLX extension in X.Org X server prior to version 1.16.3. Root cause: several functions exposed via the GLX and other X11 core protocol paths accept crafted length or index values, enabling out-of-bounds read/write that could crash the serve...

CVE-2014-8097

CVE-2014-8097 is a vulnerability in the X.Org X Server DBE extension present in X.Org X Window System before 1.16.3. It allows remote authenticated users to trigger an out-of-bounds read or write via a crafted length or index value to the DBE-related functions (DbeSwapBuffers family), potentially...

CVE-2014-8102

CVE-2014-8102 affects the X.Org X Window System's XFixes extension: SProcXFixesSelectSelectionInput in the XFixes extension of X.Org X Server versions before 1.16.3. A remote authenticated user can trigger an out-of-bounds read or write, leading to denial of service or potentially executing arbit...

CVE-2014-8103

X.Org X Server (1.15.0–1.16.x before 1.16.3) is affected. Remote authenticated users can trigger an out-of-bounds read/write or potentially execute arbitrary code via crafted lengths/indices in DRI3/Present path (sproc_dri3_* and sproc_present_*). This may enable DoS or code execution. Remediatio...

Xi Graphics Accelerated X 4.0 .x/5.0 - Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/488/info Accelerated-X, also known as Accel-X, is a popular commercial X server available from Xi Graphics. The servers are normally installed setuid root, and contain multiple buffer overflow vulnerabilities. These...

Caldera X Server 7.1/8.0 External Program Privileged Invocation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/5575/info Caldera's X Server implementation invokes external commands without dropping existing privilege levels. Xserver calls xkbcomp, and other related utilities, in an unsecure manner using the popen or system calls...

X.Org X Window System Xserver 1.3 XRender Extension Divide by Zero Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23741/info X.Org X Window System Xserver is prone to a denial-of-service vulnerabilty because the software fails to properly handle exceptional conditions. Attackers who can connect to a vulnerable X server may exploit th...

DSA-2784-1 xorg-server - use-after-free

Bulletin has no description...

Oracle Linux 5 : xorg-x11-server (ELSA-2010-0382)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0382 advisory. 1.1.1-48.76.0.1.el55.1 - Added oracle-enterprise-detect.patch - Replaced 'Red Hat' in spec file 1.1.1-48.76.1 - xserver-1.1.1-mod-macro-parens.patch: Fix...