Updated mesa packages fix multiple vulnerabilties

An out-of-bounds access flaw was found in Mesa. If an application using Mesa exposed the Mesa API to untrusted inputs Mozilla Firefox does this, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

CVE-2013-2066

Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function...

CVE-2013-2001

Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function...

CVE-2013-1997

Multiple buffer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the 1 XAllocColorCells, 2 XkbReadGetDeviceInfoReply, 3 XkbReadGeomShapes, 4 XkbReadGetGeometryReply...

DEBIAN-CVE-2013-2003

Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XcursorFileHeaderCreate function...

CVE-2013-1997

Summary of CVE-2013-1997 (X.Org libX11): Multiple integer overflow and heap-based buffer overflow flaws in XAllocColorCells(), _XkbReadGetDeviceInfoReply(), _XkbReadGeomShapes(), _XkbReadGetGeometryReply(), _XkbReadKeySyms(), _XkbReadKeyActions(), _XkbReadKeyBehaviors(), _XkbReadModifierMap(), _X...

Integer overflow

Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XvQueryPortAttributes, 2 XvListImageFormats, and 3 XvCreateImage function...

Integer overflow

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...

CVE-2013-1982

Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XcupGetReservedColormapEntries, 2 XcupStoreColors, 3 XdbeGetVisualInfo, 4 XeviGetVisualInfo, 5 XShapeGetRectangles, and 6...

CVE-2013-1981

Multiple integer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XQueryFont, 2 XF86BigfontQueryFont, 3 XListFontsWithInfo, 4 XGetMotionEvents, 5 XListHosts, 6...

CVE-2013-1983

Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function...

CVE-2013-1989

X.Org libXv (libXv 1.0.7 and earlier) is vulnerable due to multiple integer overflows in the XvQueryPortAttributes, XvListImageFormats, and XvCreateImage functions. This memory/buffer overflow could allow a remote attacker connecting to a malicious X server to overflow a buffer and potentially ex...

CVE-2013-1984

Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XGetDeviceControl, 2 XGetFeedbackControl, 3 XGetDeviceDontPropagateList, 4 XGetDeviceMotionEvents, 5 XIGetProperty, 6...

CVE-2013-1988

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...

CVE-2013-1984

CVE-2013-1984 refers to multiple integer overflows in X.Org X11 libXi (1.7.1 and earlier) enabling memory allocation issues and buffer overflows via several XI/XGet… functions. The issue is part of a broader set of X.Org vulnerabilities; affected are X11 client libraries such as libXi and related...

CVE-2013-1993

CVE-2013-1993 involves multiple integer overflows in the X.org libGLX in Mesa 9.1.1 and earlier, enabling a X server to trigger allocation of insufficient memory and a buffer overflow via the XF86DRIOpenConnection and XF86DRIGetClientDriverName functions. Reported across various advisories (Mirac...

Fedora Update for xorg-x11-server FEDORA-2013-5967

Check for the Version of xorg-x11-server OpenVAS Vulnerability Test Fedora Update for xorg-x11-server FEDORA-2013-5967 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

SuSE 11.2 Security Update : Xorg (SAT Patch Number 7761)

This update of xorg-x11-server fixes one security issue and two bugs. In some cases, input events are sent to X servers not currently the VT owner, allowing a user to capture passwords. CVE-2013-1940 Also the following bugs have been fixed : - A memory leak in cursor handling could slowly run the...

Apple Mac OSX Server - DirectoryService Buffer Overflow

Apple Mac OSX Server - DirectoryService Buffer Overflow Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Mac OSX Server DirectoryService buffer overflow 1. Advisory Information Title: Mac OSX Server DirectoryService buffer overflow Advisory ID: CORE-2013-0103 Advisory URL:...

Mac OSX Server DirectoryService buffer overflow

Advisory ID Internal CORE-2013-0103 1. Advisory Information Title: Mac OSX Server DirectoryService buffer overflow Advisory ID: CORE-2013-0103 Date published: 2013-06-04 Date of last update: 2013-06-04 Vendors contacted: Apple Release mode: Coordinated release 2. Vulnerability Information Class:...