3392 matches found
Low: Red Hat Security Advisory: X.org X11 security, bug fix, and enhancement update
Updated X.org server and driver packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
X.Org X Server: Privilege escalation
Background The X Window System is a graphical windowing system based on a client/server model. Description An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to...
X.Org Flaw Allows Privilege Escalation in Linux Systems
A local privilege-escalation and file-overwrite vulnerability in X.Org X server opens the door to trivial compromise in Linux systems that use the open-source software. The X server is a core graphics and windowing technology that can be found in most Linux and BSD distributions that use a...
Ubuntu 16.04 LTS / 18.04 LTS : X.Org X server vulnerability (USN-3802-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3802-1 advisory. Narendra Shinde discovered that the X.Org X server incorrectly handled certain command line parameters when running as root with the legacy wrapper...
New Privilege Escalation Flaw Affects Most Linux Distributions
An Indian security researcher has discovered a highly critical flaw in X.Org Server package that impacts OpenBSD and most Linux distributions, including Debian, Ubuntu, CentOS, Red Hat, and Fedora. Xorg X server is a popular open-source implementation of the X11 system display server that offers ...
[SECURITY] Fedora 27 Update: libxkbcommon-0.8.2-1.fc27
libxkbcommon is the X.Org library for compiling XKB maps into formats usabl e by the X Server or other display servers...
[SECURITY] Fedora 28 Update: libxkbcommon-0.8.2-1.fc28
libxkbcommon is the X.Org library for compiling XKB maps into formats usabl e by the X Server or other display servers...
Security Bulletin: Multiple vulnerabilities in xorg-x11-libs affect IBM Flex System Manager (FSM) (CVE2015-1802, CVE-2015-1803, CVE-2015-1804)
Summary Multiple security vulnerabilities have been discovered in xorg-x11-libs that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2015-1802 DESCRIPTION: X.Org libXfont could allow a local attacker to gain elevated privileges on the...
Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)
Summary IBM Security Guardium is vulnerable to several possible remote attacks Vulnerability Details CVEID: CVE-2015-4881 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the CORBA component has complete confidentiality impact, complete integrity impact, and complete...
[SECURITY] Fedora 27 Update: libXfont-1.5.4-1.fc27
X.Org X11 libXfont runtime library...
[SECURITY] Fedora 27 Update: libXfont2-2.0.3-1.fc27
X.Org X11 libXfont2 runtime library...
[SECURITY] Fedora 26 Update: libXfont2-2.0.3-1.fc26
X.Org X11 libXfont2 runtime library...
[SECURITY] Fedora 26 Update: libXfont-1.5.4-1.fc26
X.Org X11 libXfont runtime library...
LibXfont, LibXfont2: Arbitrary file access
Background X.Org Xfont library. Description It was discovered that libXfont incorrectly followed symlinks when opening font files. Impact A local unprivileged user could use this flaw to cause the X server to access arbitrary files, including special device files. Workaround There is no known...
LibXcursor: User-assisted execution of arbitrary code
Background X.Org X11 libXcursor runtime library. Description It was discovered that libXcursor is prone to several heap overflows when parsing malicious files. Impact A remote attacker, by enticing a user to process a specially crafted cursor file, could possibly execute arbitrary code with the...
EulerOS 2.0 SP1 : xorg-x11-server (EulerOS-SA-2017-1295)
According to the version of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In X.Org Server aka xserver and xorg-server before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer,...
EulerOS 2.0 SP2 : xorg-x11-server (EulerOS-SA-2017-1296)
According to the version of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In X.Org Server aka xserver and xorg-server before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer,...
Debian DLA-1186-1 : xorg-server security update
Several vulnerabilities have been discovered in the X.Org X server. An attacker who's able to connect to an X server could cause a denial of service or potentially the execution of arbitrary code. For Debian 7 'Wheezy', these problems have been fixed in version 2:1.12.4-6+deb7u8. We recommend tha...
GLSA-201711-05 : X.Org Server: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201711-05 X.Org Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.Org Server. Please review the referenced CVE identifiers for details. Impact : Attackers could execute arbitrary code or cause a...