Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

x x.org x11 7.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-0064
xkeyboard-config prior to 2.5 in X.Org prior to 7.6 enables certain XKB debugging functions by default, which allows physically proximate malicious users to bypass an X screen lock via keyboard combinations that break the input grab.
Xkeyboard Config Project Xkeyboard-config 2.0X X.org X11 1.0X X.org X11 3.0X X.org X11 4.0X X.org X11 5.0X X.org X11 7.1X X.org X11 7.2X X.org X11 7.3X X.org X11 7.4X X.org X11 6.5.1X X.org X11 6.6X X.org X11 6.7X X.org X11 6.8Xkeyboard Config Project Xkeyboard-configXkeyboard Config Project Xkeyboard-config 2.2X X.org X11 6.0X X.org X11 6.3X X.org X11 6.8.2X X.org X11 7.0X X.org X11 7.5Xkeyboard Config Project Xkeyboard-config 2.3Xkeyboard Config Project Xkeyboard-config 2.1
NA
CVE-2014-8102
The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or po...
X.org Xorg-serverX.org X11 6.8Debian Debian Linux 7.0
NA
CVE-2013-7439
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 prior to 1.6.0 allow remote malicious users to have unspecified impact via a crafted request, which triggers a buffer overflow.
X.org Libx11 1.4.99.902X.org Libx11 1.4.99.901X.org Libx11 1.3.99.901X.org Libx11 1.3.6X.org Libx11 1.2.2X.org Libx11 1.2.1X.org Libx11 1.1.99.1X.org Libx11 1.1X.org Libx11 1.4.4X.org Libx11 1.4.3X.org Libx11 1.3.5X.org Libx11 1.3.4X.org Libx11 1.2X.org Libx11 1.1.6X.org Libx11 1.0.1X.org Libx11 1.5.99.902X.org Libx11 1.4.2X.org Libx11 1.4.1X.org Libx11 1.3.3X.org Libx11 1.3.2X.org Libx11 1.1.5X.org Libx11 1.1.4
7
CVSSv3
CVE-2023-5574
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-f...
X.org X ServerRedhat Enterprise Linux 7.0
NA
CVE-2014-8094
Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 up to and including 1.16.x prior to 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a...
X.org Xorg-server 1.14.2X.org Xorg-server 1.10.1X.org Xorg-server 1.8.99.905X.org Xorg-server 1.13.1.901X.org Xorg-server 1.7.5.902X.org Xorg-server 1.7.4.901X.org Xorg-server 1.11.0X.org Xorg-server 1.7.2X.org Xorg-server 1.8.2.901X.org Xorg-server 1.12.1.902X.org Xorg-server 1.13.3X.org Xorg-server 1.10.6X.org Xorg-server 1.14.1.902X.org Xorg-server 1.11.3X.org Xorg-server 1.14.4.901X.org Xorg-server 1.10.4X.org Xorg-server 1.9.99.903X.org Xorg-server 1.16.0X.org Xorg-server 1.14.4X.org Xorg-server 1.10.99.901X.org Xorg-server 1.14.5.901X.org Xorg-server 1.12.3.901
7
CVSSv3
CVE-2017-2624
It was found that xorg-x11-server prior to 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is...
X.org Xorg-serverDebian Debian Linux 7.0
4.7
CVSSv3
CVE-2023-5380
A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root...
X.org XwaylandX.org X ServerRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Fedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39Debian Debian Linux 11.0Debian Debian Linux 12.0
7.8
CVSSv3
CVE-2020-14346
A flaw was found in xorg-x11-server prior to 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as sys...
X.org Xorg-serverRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux 8.0
7.8
CVSSv3
CVE-2020-14361
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabilit...
X.org Xorg-serverRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux 8.0
7.8
CVSSv3
CVE-2020-14362
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabilit...
X.org Xorg-serverRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux 8.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook