Debian Security Advisory DSA 2784-1 (xorg-server - use-after-free)

Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation. OpenVAS Vulnerability Test $Id: deb2784.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2784-1 using...

Debian: Security Advisory (DSA-2784-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for xorg-server USN-1990-1

Check for the Version of xorg-server OpenVAS Vulnerability Test $Id: gbubuntuUSN19901.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for xorg-server USN-1990-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu 12.04 LTS / 12.10 / 13.04 : xorg-server, xorg-server-lts-quantal, xorg-server-lts-raring vulnerabilities (USN-1990-1)

Pedro Ribeiro discovered that the X.Org X server incorrectly handled memory operations when handling ImageText requests. An attacker could use this issue to cause X.Org to crash, or to possibly execute arbitrary code. CVE-2013-4396 It was discovered that non-root X.Org X servers such as Xephyr...

Ubuntu: Security Advisory (USN-1990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2013-1241

Name of the Vulnerable Software and Affected Versions X.org X server version 1.13.3 and earlier xorg-server versions prior to 1.14.3-r2 Description The issue allows local users to cause a denial of service or possibly gain privileges via vectors involving cached xkb files. Additionally, multiple...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/xorg-server-1.12.4-i486-2slack14.0.txz: Rebuilt. Patched a use-after-free bug that can cause an ...

Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : xorg-server (SSA:2013-287-05)

New xorg-server packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-287-05...

CVE-2013-4396

CVE-2013-4396 describes a use-after-free in the X.Org X11 server’s ImageText handling (dix/dixfonts.c: doImageText) that affects xorg-server before 1.14.4. A crafted ImageText request could trigger memory-allocation failure, enabling remote authenticated users to cause a daemon crash or potential...

CVE-2013-4396

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

CVE-2013-4396

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

CVE-2013-4396: Undefined Security Weakness

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

PT-2013-1242

Name of the Vulnerable Software and Affected Versions xorg-server versions prior to 1.14.4 xorg-server versions prior to 1.14.3-r2 Description The issue is related to a use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module. This vulnerability can be...

xorg-server -- use-after-free

Alan Coopersmith reports: Pedro Ribeiro pedrib at gmail.com reported an issue to the X.Org security team in which an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption...

PT-2013-1133

Name of the Vulnerable Software and Affected Versions X.org libFS version 1.0.4 and earlier xorg-server versions prior to 1.14.3-r2 libfs affected versions not specified Description The issue allows for a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer...

PT-2013-1138

Name of the Vulnerable Software and Affected Versions libXt versions 1.1.3 and earlier xorg-server versions prior to 1.14.3-r2 libXext versions 1.3.2 and earlier libX11 versions 1.6.0 and earlier libXinerama versions 1.1.3 and earlier libXfixes versions 5.0.1 and earlier libXp versions 1.0.2 and...

PT-2013-1126

Name of the Vulnerable Software and Affected Versions libX11 versions 1.6.0 libX11-devel versions 1.6.0 libXext versions 1.3.2 libXext-devel versions 1.3.2 libXfixes versions 5.0.1 libXfixes-devel versions 5.0.1 libXinerama versions 1.1.3 libXinerama-devel versions 1.1.3 libXi versions 1.7.2...

PT-2013-1125

Name of the Vulnerable Software and Affected Versions libXi versions 1.7.1 and earlier xorg-server versions prior to 1.14.3-r2 libXext versions 1.3.2 libX11 versions 1.6.0 libXt versions 1.1.4 libXfixes versions 5.0.1 libXinerama versions 1.1.3 libXrandr versions 1.4.1 libXp versions 1.0.2...

PT-2013-1121

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux affected versions not specified xorg-server versions prior to 1.14.3-r2 libXvMC versions prior to 1.0.8 libXvMC-1.0.7 and earlier Description The issue involves multiple vulnerabilities in various packages of Red Hat...

PT-2013-1139

Name of the Vulnerable Software and Affected Versions xorg-server versions prior to 1.14.3-r2 libXt versions prior to 1.1.4 libXext versions prior to 1.3.2 libX11 versions prior to 1.6.0 libXtst versions prior to 1.2.2 libXi versions prior to 1.7.2 libXres versions prior to 1.0.7 libXrandr versio...