Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

x x.org x11 6.0 vulnerabilities and exploits

(subscribe to this query)
3.6
CVSSv2
CVE-2012-1699
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 prior to 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and...
X X.org X11 6.0X X.org X11 6.4X X.org X11 6.5.1X X.org X11 6.1X X.org X11 6.3X X.org X11 6.6Xfree86 Xfree86
4.6
CVSSv2
CVE-2012-0064
xkeyboard-config prior to 2.5 in X.Org prior to 7.6 enables certain XKB debugging functions by default, which allows physically proximate malicious users to bypass an X screen lock via keyboard combinations that break the input grab.
Xkeyboard Config Project Xkeyboard-config 2.0X X.org X11 1.0X X.org X11 3.0X X.org X11 4.0X X.org X11 5.0X X.org X11 7.1X X.org X11 7.2X X.org X11 7.3X X.org X11 7.4X X.org X11 6.5.1X X.org X11 6.6X X.org X11 6.7X X.org X11 6.8Xkeyboard Config Project Xkeyboard-configXkeyboard Config Project Xkeyboard-config 2.2X X.org X11 6.0X X.org X11 6.3X X.org X11 6.8.2X X.org X11 7.0X X.org X11 7.5Xkeyboard Config Project Xkeyboard-config 2.3Xkeyboard Config Project Xkeyboard-config 2.1
7.5
CVSSv2
CVE-2013-7439
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 prior to 1.6.0 allow remote malicious users to have unspecified impact via a crafted request, which triggers a buffer overflow.
X.org Libx11 1.4.99.902X.org Libx11 1.4.99.901X.org Libx11 1.3.99.901X.org Libx11 1.3.6X.org Libx11 1.2.2X.org Libx11 1.2.1X.org Libx11 1.1.99.1X.org Libx11 1.1X.org Libx11 1.4.4X.org Libx11 1.4.3X.org Libx11 1.3.5X.org Libx11 1.3.4X.org Libx11 1.2X.org Libx11 1.1.6X.org Libx11 1.0.1X.org Libx11 1.5.99.902X.org Libx11 1.4.2X.org Libx11 1.4.1X.org Libx11 1.3.3X.org Libx11 1.3.2X.org Libx11 1.1.5X.org Libx11 1.1.4
6.5
CVSSv2
CVE-2014-8096
The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly exec...
X.org X11 6.0X.org Xorg-serverDebian Debian Linux 7.1Debian Debian Linux 8.0
4.6
CVSSv2
CVE-2020-14346
A flaw was found in xorg-x11-server prior to 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as sys...
X.org Xorg-serverRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux 8.0
4.6
CVSSv2
CVE-2020-14361
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabilit...
X.org Xorg-serverRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux 8.0
4.6
CVSSv2
CVE-2020-14362
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabilit...
X.org Xorg-serverRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux 8.0
NA
CVE-2022-4283
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems ...
X.org Xorg-server 1.20.4Fedoraproject Fedora 36Fedoraproject Fedora 37Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Debian Debian Linux 11.0
6.2
CVSSv2
CVE-2007-3103
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
Fedoraproject Fedora Core 6.0Redhat Enterprise Linux 4.0Redhat Enterprise Linux Desktop 4.0Redhat Linux
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook