1510 matches found
CLEANSTART-2025-TJ11096 flaw was found in xorg-server
Security vulnerability affects the xorg-server package. A flaw was found in xorg-server...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147029)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147029 advisory. A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and write...
Astra Linux – vulnerability in xwayland, xorg-server
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler fails to validate the request length, enabling a client to read unintended memory from prior requests...
Astra Linux – vulnerability in xwayland, xorg-server
A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 while leaving the key actions unchanged. Later, if the same function is called with a non-zero value for groups, this will result in a buffer overflow...
Astra Linux – Vulnerability in xorg-server
A out-of-bounds read flaw was discovered in the X.Org X server and Xwayland within the glXDispChangeDrawableAttributes function. A incorrect size validation check allows a client-controlled number of bytes to be read, exceeding the request buffer, resulting in information disclosure. A write path...
Astra Linux – Vulnerability in xwayland, xorg-server
A flaw was discovered in the X.Org X server’s validation of XKB key type requests. A local attacker could send a specially crafted request to the X server, leading to a vulnerability where out-of-bounds memory access could occur. This could result in the disclosure of sensitive information or cau...
Astra Linux – vulnerability in xorg-server
In X.Org X servers versions 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures utilized by the input thread without obtaining a lock; this results in a race condition. Specifically, AttachDevice in dix/devices.c...
Astra Linux – Vulnerability in xorg-server
A vulnerability was discovered in X.Org. This security flaw arises because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where the X server is running with privileged access, and may...
Astra Linux – Vulnerability in xorg-server
A vulnerability was discovered in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where X is used...
Astra Linux – Vulnerability in xorg-server
A use-after-free vulnerability was discovered in the ProcRenderAddGlyphs function of Xorg servers. This issue arises when the AllocateGlyph function is called to store new glyphs sent by the client to the X server. As a result, multiple entries may point to the same non-refcounted glyphs...
Astra Linux – vulnerability in xorg-server
A flaw was found in the X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or...
Astra Linux – vulnerability in xwayland, xorg-server
A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms differs from what is written in XkbWriteKeySyms, which may lead to a heap-based buffer overflow...
Astra Linux – vulnerability in xwayland, xorg-server
A buffer overflow vulnerability was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-size buffer on the stack and copies the names of virtual modifiers into that buffer. The code fails to check the buffer’s boundaries and copies data regardless of its size...
Astra Linux – Vulnerability in xorg-server
A use-after-free flaw was discovered in the X.Org X server and Xwayland in the CreateSaverWindow function. A client can trigger a use-after-free error after changing window attributes and forcing the screen saver, resulting in information disclosure...
Astra Linux – vulnerability in xwayland, xorg-server
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, which may lead to an integer overflow and result in bypassing the size check...
Astra Linux – Vulnerability in xwayland, xorg-server
A flaw was discovered in the handling of animated cursors by the X Rendering extension. If a client does not provide any cursors, the server assumes that at least one is present. This can lead to an out-of-bounds read and potential crash...
Astra Linux – Vulnerability in xorg-server
A out-of-bounds write flaw was discovered in the X.Org X server and Xwayland within DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger a out-of-bounds heap write. This vulnerability could be exploited to...
Astra Linux – vulnerability in xorg-server
A stack-based buffer overflow vulnerability has been identified in the X.Org X server and Xwayland. An inconsistency between the X server’s maximum allowable length for font names and the libXfont2 library’s limits can lead to a stack buffer overflow during font alias resolution. The server...