Lucene search
+L

93 matches found

OSV
OSV
added 2025/06/17 3:00 p.m.8 views

CVE-2025-49180 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate...

7.8CVSS6.7AI score
SaveExploits0References36
RedhatCVE
RedhatCVE
added 2025/06/17 3:00 p.m.7 views

CVE-2025-49180

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate. Mitigation Mitigation for this issue is either not available or the currently available options...

7.8CVSS6.2AI score0.00309EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.5 views

X.org RandR Extension 输入验证错误漏洞

X.org RandR Extension is an extension from the X.org Foundation. An input validation error vulnerability exists in X.org RandR Extension, which stems from insufficient input validation and could lead to an integer overflow...

7.8CVSS7.5AI score0.00309EPSS
SaveExploits0References5
OSV
OSV
added 2025/06/17 12:00 a.m.6 views

UBUNTU-CVE-2025-49180

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate...

7.8CVSS7AI score0.00309EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/03/27 12:00 a.m.3 views

PT-2025-25691

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to...

7.8CVSS6.8AI score0.0034EPSS
SaveExploits0References145
OSV
OSV
added 2023/11/02 9:10 a.m.7 views

SUSE-SU-2023:4338-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol bsc1216261. - CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens bsc121613...

7.8CVSS6.5AI score0.00715EPSS
SaveExploits0References7
OSV
OSV
added 2023/10/31 8:22 a.m.5 views

SUSE-SU-2023:4293-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol bsc1216261. - CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols bsc1216135...

7.8CVSS7.6AI score0.0062EPSS
SaveExploits0References5
OSV
OSV
added 2023/10/31 8:21 a.m.8 views

SUSE-SU-2023:4292-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol bsc1216261. - CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens bsc121613...

7.8CVSS6.5AI score0.00715EPSS
SaveExploits0References7
OSV
OSV
added 2023/10/30 4:40 p.m.13 views

SUSE-SU-2023:4269-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol bsc1216261. - CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens bsc121613...

7.8CVSS6.5AI score0.00715EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:26 a.m.3 views

SUSE CVE-2014-8101

The RandR extension in XFree86 4.2.0, X.Org X Window System aka X11 or X X11R6.7, and X.Org Server aka xserver and xorg-server before 1.16.3 allows remote authenticated users to cause a denial of service out-of-bounds read or write or possibly execute arbitrary code via a crafted length or index...

6.5CVSS7.8AI score0.04373EPSS
SaveExploits0References6
Ubuntu
Ubuntu
added 2022/05/18 1:06 p.m.82 views

USN-5428-1: libXrandr vulnerabilities

Tobias Stoeckmann discovered that libXrandr incorrectly handled certain responses. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. CVE-2016-7947, CVE-2016-7948...

9.8CVSS8.6AI score0.03321EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2017/08/07 12:00 a.m.40 views

tigervnc and fltk security, bug fix, and enhancement update

fltk 1.3.4-1 - Re-base to 1.3.4 + sync with Fedora tigervnc 1.8.0-1 - Update to 1.8.0 Resolves: bz1388620 1.7.90-2 - Make RandR callbacks optional Resolves: bz1444948 1.7.90-1 - Update to 1.7.90 Resolves: bz1388620 1.7.1-3 - Delete underlying ssecurity in SSecurityVeNCrypt CCVE-2017-7392 Resolves...

9.8CVSS8AI score0.03477EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2016/09/26 12:00 a.m.36 views

openSUSE Security Update : gtk2 (openSUSE-2016-1117)

This gtk2 update to version 2.24.31 fixes the following issues : Security issues fixed : - CVE-2013-7447: Fixed integer overflow in image handling boo966682. Bugs fixed : - Changes from version 2.24.31 : + Backport many file chooser entry fixes and cleanups. + Don't crash if invisible files are...

6.5CVSS6.6AI score0.05611EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2015/10/13 12:00 a.m.40 views

SUSE: Security Advisory for xorg-x11-server (SUSE-SU-2015:0045-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6AI score0.05192EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.19 views

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the xorg-x11-server-randr-source-1.1.1 package of the Red Hat Enterprise Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

10CVSS7.7AI score0.03566EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2015/01/15 12:00 a.m.34 views

SuSE 11.3 Security Update : xorg-x11-server (SAT Patch Number 10108)

The XOrg X11 server was updated to fix 12 security issues : - Denial of service due to unchecked malloc in client authentication. CVE-2014-8091 - Integer overflows calculating memory needs for requests. CVE-2014-8092 - Integer overflows calculating memory needs for requests in GLX extension...

6.5CVSS6.1AI score0.05192EPSS
SaveExploits0References28
ArchLinux
ArchLinux
added 2014/12/12 12:00 a.m.48 views

xorg-server: multiple issues

CVE-2014-8091 denial of service X.Org X Window System, when using SUN-DES-1 Secure RPC authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a crafted connection...

6.5CVSS6.2AI score0.05192EPSS
SaveExploits0References15
RedHat Linux
RedHat Linux
added 2014/12/11 7:41 p.m.12 views

xorg-x11-server: out of bounds access due to not validating length or offset values in RandR extension

Multiple out-of-bounds access flaws were found in the way the X.Org server calculated memory requirements for certain requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server...

6.5CVSS6.8AI score0.04373EPSS
SaveExploits0References5
Oracle linux
Oracle linux
added 2014/12/11 12:00 a.m.57 views

xorg-x11-server security update

1.1.1-48.107.0.1.el511 - Added oracle-enterprise-detect.patch - Replaced 'Red Hat' in spec file 1.1.1-48.107 - CVE-2014-8091 denial of service due to unchecked malloc in client authentication 1168680 - CVE-2014-8092 integer overflow in X11 core protocol requests when calculating memory needs for...

6.5CVSS1.2AI score0.05192EPSS
SaveExploits0
NVD
NVD
added 2014/12/10 3:59 p.m.19 views

CVE-2014-8101

The RandR extension in XFree86 4.2.0, X.Org X Window System aka X11 or X X11R6.7, and X.Org Server aka xserver and xorg-server before 1.16.3 allows remote authenticated users to cause a denial of service out-of-bounds read or write or possibly execute arbitrary code via a crafted length or index...

6.5CVSS7.3AI score0.04373EPSS
SaveExploits0References10
Rows per page
Query Builder