CVE-2024-0409

CVE-2024-0409 is part of multiple xorg-x11-server advisories (ALSA/ALAS2/CentOS) affecting X.Org X server components. Connected documents specify concrete CVEs and affected packages: CVE-2023-6816 (Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer), CVE-2024-0229 (reattaching to dif...

CVE-2023-6816

The CVE-2023-6816 issue affects the X.Org Server (xorg-x11-server) and stems from a heap overflow in DeviceFocusEvent and ProcXIQueryPointer due to allocating space only for the device’s button count; extra bits (up to 255) can cause overflow when bigger values are used. This impacts X.Org Server...

CVE-2024-0408

CVE-2024-0408 affects the xorg-x11-server (X.Org server). The GLX PBuffer code omits the XACE hook during buffer creation, leaving the object unlabeled; subsequent access (e.g., GetGeometry) or creation of related resources (e.g., GC) can cause the SELinux XSELINUX path to use an unlabelled objec...

CVE-2024-0229

CVE-2024-0229 affects the X.Org server (xorg-x11-server). The flaw is an out-of-bounds memory access triggered when a device frozen by a sync grab is reattached to a different master device, potentially causing an application crash, local privilege escalation, or remote code execution in SSH X11 ...

CVE-2023-0494

The CVE-2023-0494 entry concerns X.Org X server: a dangling pointer in DeepCopyPointerClasses can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read/write freed memory, enabling local privilege elevation on privileged X servers and remote code execution for SSH X forwarding...

CVE-2020-14347

CVE-2020-14347 affects the X.Org X server (xorg-server): a flaw that leaks uninitialized heap memory from the server to clients, potentially enabling information disclosure and, in elevated-privilege setups, ASLR bypass. Affected releases include Xorg-server prior to a patched version; multiple a...

CVE-2020-14345

CVE-2020-14345 affects the X.Org/Xorg-X11-Server (xorg-x11-server). The root cause is an Out-of-Bounds access in the XkbSetNames function, potentially enabling privilege escalation. The vulnerability is described as impacting confidentiality, integrity, and availability, with local attack vector ...

CVE-2020-25712

Affected software: xorg-x11-server (before 1.20.10). Vulnerable component/function: XkbSetDeviceInfo in the XKB code, with a heap-based buffer overflow leading to privilege escalation. Exploitation/impact: local attacker could exploit this to escalate privileges and impact confidentiality, integr...

CVE-2020-14362

CVE-2020-14362 concerns X.Org Server prior to xorg-x11-server 1.20.9, where an integer underflow can trigger a heap-buffer overflow, enabling privilege escalation. The impact is described as affecting confidentiality, integrity, and availability. Evidence across connected sources ties this CVE to...

CVE-2018-14665

The CVE-2018-14665 issue affects the X.Org X server (xorg-server) prior to 1.20.3. A flaw in command-line parameter validation allows unprivileged users who can access the system’s physical console to escalate to root by exploiting -modulepath or -logfile handling when the X server runs with setu...

CVE-2020-14361

Concrete detail from connected docs confirms CVE-2020-14361 affects X.Org Server (xorg-x11-server). The flaw is an Integer underflow in the XkbSelectEvents path that leads to a heap-buffer overflow and a privilege-escalation impact (data confidentiality, integrity, availability). Multiple vendor ...

CVE-2020-14360

The CVE-2020-14360 vulnerability affects the X.Org Server (XKB Xserver extension). It stems from an out-of-bounds access in XkbSetMap, which may allow privilege escalation and impact confidentiality, integrity, and availability. Public advisories (e.g., Arch Linux ASA-202012-6 and AlmaLinux 2021 ...

CVE-2020-14346

CVE-2020-14346 affects xorg-x11-server prior to 1.20.9. The X.Org Server’s X input extension protocol decoding has an integer underflow that may lead to arbitrary memory access, impacting confidentiality, integrity, and availability. The connected documents confirm the vulnerability and reference...

CVE-2021-3472

CVE-2021-3472 affects xorg-x11-server and related packages up to version before 1.20.11. The root cause is an integer underflow in the X server component (notably XChangeFeedbackControl) that can lead to local privilege escalation, with potential impact to confidentiality, integrity, and availabi...

CVE-2022-4283

CVE-2022-4283 affects the X.Org X server component handling keyboard name lookups (XkbGetKbdByName/XkbCopyNames). The provided documents link this issue to use-after-free/out-of-bounds conditions in Xkb-related code, potentially enabling local privilege elevation on privileged X servers and remot...

CVE-2023-5367

CVE-2023-5367 is an out-of-bounds write in xorg-x11-server, caused by an incorrect calculation of a heap buffer offset in XIChangeDeviceProperty (Xi/xiproperty.c) and RRChangeOutputProperty (randr/rrproperty.c). Affects the xorg-x11-server component across multiple Linux distributions; can lead t...

CVE-2023-1393

Concretely, CVE-2023-1393 affects the X.Org Server Overlay Window vulnerability in xorg-x11-server (and Xwayland variants) due to a use-after-free from destroying the compositor overlay window, leaving a dangling CompScreen pointer and enabling local privilege escalation. Affected packages includ...

CVE-2023-5380

CVE-2023-5380 is a use-after-free in the xorg-x11-server (DestroyWindow path) that can crash the X server in Zaphod mode (multi-screen with multiple protocol screens). The issue is reported within the same family of xorg-x11-server memory-safety bugs, with the given CVSSv3.1 vector indicating Loc...

CVE-2021-4010

CVE-2021-4010 affects xorg-x11-server (X.Org X server) with an out-of-bounds access in the SProcScreenSaverSuspend function in versions before 21.1.2 and before 1.20.14. This vulnerability could impact confidentiality, integrity, and availability. The issue is mitigated by upgrading to the fixed ...

CVE-2022-46341

CVE-2022-46341 affects the X.Org X server (XIPassiveUngrab) where the handler accesses out-of-bounds memory when invoked with high keycode/button code. The connected advisories confirm this in various distributions (ALM/ALAS), noting local privilege elevation on privileged X server and potential ...

CVE-2023-6377

CVE-2023-6377 affects xorg-x11-server (XKB button actions) with out-of-bounds memory reads/writes. The flaw can enable local privilege escalation or remote code execution in scenarios involving X11 forwarding. Affected components cited across multiple advisories include xorg-server and related X1...

CVE-2022-2320

CVE-2022-2320 affects the X.Org X11 server (xorg-x11-server). The flaw is in the ProcXkbSetDeviceInfo handler, caused by insufficient validation of user data, which can lead to an out-of-bounds memory access and allow a local attacker to escalate privileges and execute code with root privileges. ...

CVE-2022-2319

The CVE-2022-2319 entry concerns the X.Org X11 server (ProcXkbSetGeometry) with an out-of-bounds access due to insufficient validation of the request length. Connected advisories across distributions (Debian, CentOS/Red Hat, AlmaLinux, Debian security tracker, etc.) confirm this vulnerability in ...

CVE-2022-46340

CVE-2022-46340 affects the X.Org X server. The issue is a stack overflow in the XTestSwapFakeInput path of the XTest extension, triggered when GenericEvents with lengths > 32 bytes are sent via XTestFakeInput. Reported consequences include local privilege elevation on privileged X servers and ...

CVE-2022-46342

CVE-2022-46342 affects the X.Org X11 server (xorg-x11-server). The issue is a use-after-free in the XvdiSelectVideoNotify handler, which can lead to local privilege elevation on privileged X servers (and, per some advisories, potential remote code execution via X forwarding). Multiple advisories ...

CVE-2023-6478

CVE-2023-6478 affects the X.Org X server (xorg-server). A flaw in handling RRChangeOutputProperty and RRChangeProviderProperty can trigger an integer overflow, potentially leading to disclosure of sensitive information. Connected advisories (e.g., Red Hat/AlmaLinux errata) corroborate the vulnera...

CVE-2021-4009

Affected software: xorg-x11-server (versions before 21.1.2 and before 1.20.14). Fault: out-of-bounds access in SProcXFixesCreatePointerBarrier. Impact: potential data confidentiality, integrity, and availability compromise. Status: fixed in updated releases (e.g., 21.1.2 and 1.20.14 lineage) per ...

CVE-2022-46344

CVE-2022-46344 affects X.Org X11-server (XIChangeProperty). The description in the CVE entry notes an out-of-bounds memory access in the XIChangeProperty handler, enabling potential local privilege elevation on privileged X servers and remote code execution for ssh X forwarding sessions. Connecte...

CVE-2021-4008

The CVE-2021-4008 entry concerns xorg-x11-server with an out-of-bounds access in SProcRenderCompositeGlyphs. Affected versions are those before 21.1.2 and before 1.20.14. The vulnerability can impact data confidentiality, integrity, and availability; the highest impact is indicated for all three,...

CVE-2022-46343

The CVE-2022-46343 entry affects the X.Org X server (ScreenSaverSetAttributes) with a use-after-free in the handler, allowing memory corruption that can lead to local privilege elevation or remote code execution in ssh X forwarding sessions. Connected advisories (e.g., ALSA/2023:2806, ALSA-2023:2...

CVE-2025-26601

CVE-2025-26601 is a use-after-free in Xorg/Xwayland (SyncInitTrigger) when changing an alarm, potentially allowing use-after-free when the alarm triggers. Affected: xorg-x11-server-Xwayland (and related Xorg/Xwayland components). Remediation: apply the updated Xwayland/Xorg packages as described ...

CVE-2021-4011

The CVE CVE-2021-4011 affects xorg-x11-server prior to versions 21.1.2 and 1.20.14, due to an out-of-bounds access in SwapCreateRegister. This vulnerability can impact data confidentiality, integrity, and system availability. Remediation: upgrade to xorg-x11-server 21.1.2 or 1.20.14 (and later) p...

CVE-2025-26594

CVE-2025-26594 is a use-after-free in X.Org/Xwayland where the root cursor is kept as a global in the X server; freeing the root cursor can reference freed memory, causing a crash or compromise. Affected package: xorg-x11-server-Xwayland (and related Xorg/Xwayland components in advisories). Impac...

CVE-2025-26599

CVE-2025-26599 (X.Org / Xwayland) : An access to an uninitialized pointer flaw exists in compRedirectWindow() when compCheckRedirect() cannot allocate backing pixmap, causing BadAlloc and partly initialized validated data. This affects X.Org/Xwayland components and is listed in multiple advisorie...

CVE-2025-26600

CVE-2025-26600 is a use-after-free in X.Org/Xwayland. The issue occurs when a device is removed while still frozen, leaving queued events that, when replayed after the device is freed, trigger use-after-free. Connected advisories confirm Xwayland/xorg involvement and list related fixes across Xwa...

CVE-2025-26596

CVE-2025-26596 is a heap/buffer overflow in X.Org/Xwayland affecting XkbWriteKeySyms() due to a mismatch with XkbSizeKeySyms() that can lead to a heap-based overflow. Connected advisories (Astra Linux and various Amazon Linux advisories for xorg-x11-server-Xwayland/Xorg) confirm the issue and lis...

CVE-2025-26595

CVE-2025-26595 is a buffer overflow in X.Org/Xwayland where XkbVModMaskText() uses a fixed-size stack buffer without proper bounds checking. The issue affects Xorg-x11-server-Xwayland. Advisories indicate a fix is available in newer package releases (e.g., Xwayland/Xorg servers updated to 24.1.3 ...

CVE-2025-26597

CVE-2025-26597 affects X.Org/Xwayland. A buffer overflow can occur when XkbChangeTypesOfKey() is called first with a 0 group (resizing the key symbols table) and then with a non‑zero group (actions remain the wrong size). This is tied to the heap/buffer handling in XkbChangeTypesOfKey() and is re...

CVE-2025-26598

CVE-2025-26598 is an out-of-bounds write in X.Org/Xwayland. The GetBarrierDevice() lookup returns the last list element when no match is found, potentially causing out-of-bounds memory access in the barrier/pointer handling path (CreatePointerBarrierClient()). This affects xorg-x11-server-Xwaylan...

CVE-2017-13723

CVE-2017-13723 affects X.Org Server (xorg-server) prior to 1.19.4. A local attacker authenticated to the X server can overflow a global buffer via injecting large or malformed XKB atoms and accessing them through xkbcomp, leading to crashes and potential privilege elevation when run as root. Docu...

CVE-2017-12178

CVE-2017-12178 affects xorg-server (Xi component) due to an invalid/incorrect length check in ProcXIChangeHierarchy. Exploitation could crash the X server or allow arbitrary code execution. Public advisories and CVE trackers show impact on xorg-server prior to version 1.19.5. Remediation across m...

CVE-2017-12176

The CVE-2017-12176 issue affects xorg-server prior to version 1.19.5. It stems from missing extra length validation in ProcEstablishConnection, enabling a malicious X client to crash the X server and potentially execute arbitrary code. Documents from Debian, Arch Linux, and other vendors (e.g., D...

CVE-2023-5574

CVE-2023-5574 is a use-after-free in xorg-x11-server-Xvfb caused by a flaw in DamageDestroy/DestroyWindow when using a multi-screen Zaphod configuration. Affected is Xvfb, vulnerable during shutdown/reset when the pointer moves between screen 1 and screen 0, with potential for privilege escalatio...

CVE-2022-3550

CVE-2022-3550 affects the X.Org Server; the vulnerability is a buffer overflow in the _GetCountedString function in xkb/xkb.c. Exploitation details are not provided in the initial docs, but multiple advisories (ALSA/ALAS, CentOS/RHEL, Fedora references) note a patch/update is available to fix the...

CVE-2017-12184

CVE-2017-12184 affects the X.Org X server (xorg-x11-server) prior to version 1.19.5. The root cause is a missing length validation in the XINERAMA extension, which could allow a malicious X client to crash the X server or potentially execute arbitrary code. Public sources in the connected documen...

CVE-2017-12181

CVE-2017-12181 affects the X.Org X server (xorg-x11-server) prior to version 1.19.5. The vulnerability arises from missing length validation in the XFree86 DGA extension, which can cause the X server to crash and potentially allow arbitrary code execution by a malicious X client. Public documents...

CVE-2017-13721

CVE-2017-13721 affects X.Org Server (xserver/xorg-server) prior to 1.19.4. The issue arises in ProcShmCreateSegment: a shmseg resource id can belong to a non-existing client, causing X server aborts with FatalError or overwriting another client’s segment. This can enable a local attacker to crash...

CVE-2007-6427

CVE-2007-6427 affects the X.Org Xserver (XInput-Misc extension) prior to version 1.4.1. The root cause is missing input sanitising within the XInput‑Misc code, which can lead to local privilege escalation. In public advisories, this is described as a vulnerability in the XInput‑Misc path that all...

CVE-2017-12177

CVE-2017-12177 affects xorg-server prior to 1.19.5. The vulnerability arises from an integer overflow in ProcDbeGetVisualInfo, allowing a remote/local X server client to cause a crash or potentially execute arbitrary code. Public advisories (Debian, Arch Linux, Gentoo, Mageia, etc.) indicate the ...

CVE-2015-0255

X.Org X11-server (X.Org Server) is affected by CVE-2015-0255: in versions before 1.16.3 and 1.17.x before 1.17.1, a flaw in handling XkbSetGeometry requests can disclose memory or crash the server due to missing input validation. Root cause: improper validation of crafted XkbSetGeometry string le...