173 matches found
OESA-2021-1468 xorg-x11-server security update
Xorg server common files. Security Fixes: A security issue has been found in X.Org before version 21.1.2 and Xwayland before version 21.1.4. The handler for the CompositeGlyphs request of the Render extension does not properly validate the request length leading to out of bounds memory write. Thi...
Security update for xorg-x11-server (important)
openSUSE Security Update: Security update for xorg-x11-server Announcement ID: openSUSE-SU-2021:1606-1 Rating: important References: 1190487 1190488 1190489 Cross-References: CVE-2021-4009 CVE-2021-4010 CVE-2021-4011 CVSS scores: CVE-2021-4009 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:...
Updated x11-server packages fix security vulnerabilities
Updated x11-server packages fix security vulnerabilities: The handler for the CompositeGlyphs request of the Render extension does not properly validate the request length leading to out of bounds memory write CVE-2021-4008. The handler for the CreatePointerBarrier request of the XFixes extension...
CVE-2021-4010
A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
DEBIAN-CVE-2021-4010
A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
UBUNTU-CVE-2021-4010
A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
xorg-x11-server 缓冲区错误漏洞
xorg-x11-server is an X Window System display server from the X.Org Foundation. xorg-x11-server 21.1.2 and versions prior to 1.20.14 have an out-of-bounds access vulnerability in the SProcScreenSaverSuspend function, which can be exploited by attackers to threaten data confidentiality, integrity,...
[SECURITY] Fedora 33 Update: xscreensaver-5.45-2.fc33
A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...
Advisory ROSA-SA-2021-1916
Software: mate-screensaver 1.16.1 OS: Cobalt 7.9 CVE-ID: CVE-2018-20681 CVE-Crit: MEDIUM CVE-DESC: mate-screensaver before 1.20.2 in the MATE desktop environment allows physically nearby attackers to view screen content and possibly control applications. When disconnecting and reconnecting or...
CVE-2021-34557
XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...
PT-2021-4269 · Unknown +1 · Xscreensaver +1
Name of the Vulnerable Software and Affected Versions: XScreenSaver version 5.45 Description: The issue is related to a buffer overflow in the update screen layout function, which can be exploited by an attacker to bypass the standard screen lock authentication mechanism. This can be achieved by...
Microsoft Windows: Audit Other Logon/Logoff Events
Audit Other Logon/Logoff Events determines whether Windows generates audit events for other logon or logoff events. These other logon or logoff events include: - A Remote Desktop session connects or disconnects. - A workstation is locked or unlocked. - A screen saver is invoked or dismissed. - A...
Microsoft Windows: Enable screen saver
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winscreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Enable screen saver users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...
Microsoft Windows: Force specific screen saver
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winforcescreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Force specific screen saver users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...
Microsoft Windows: Screen saver timeout
This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintimoutscreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Screen saver timeout users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...
Microsoft Windows: MSS: Time (seconds) before the screen saver grace period expires
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlscreensavergraceperiod.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: ScreenSaverGracePeriod The time in seconds before the screen saver grace period expires 0 recommended Authors: Emanuel Moss Copyright:...
Microsoft Windows: Interactive logon: Machine inactivity limit
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmachineinactivitylimit.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Machine inactivity limit Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
xorg-x11-server denial of service vulnerability (CNVD-2018-03153)
The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in the MIT-SCREEN-SAVER extension in xorg-x11-server versions prior to 1.19.5, which stems from a lack of length detection in the program. An attacker can explo...
Input validation
xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...