Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

x.org x.org vulnerabilities and exploits

(subscribe to this query)
6.6
CVSSv2
CVE-2006-6103
Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data...
X.org X.org 7.1Xfree86 Project Xfree86X.org X.org 6.8.2X.org X.org 6.9.0X.org X.org 7.0
6.6
CVSSv2
CVE-2006-6101
Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of glyph manage...
X.org X.org 7.0X.org X.org 7.1Xfree86 Project Xfree86X.org X.org 6.8.2X.org X.org 6.9.0
10
CVSSv2
CVE-2006-6102
Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified da...
X.org X.org 6.9.0X.org X.org 7.0X.org X.org 6.8.2X.org X.org 7.1Xfree86 Project Xfree86 X Server
7.5
CVSSv2
CVE-2013-7439
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 prior to 1.6.0 allow remote malicious users to have unspecified impact via a crafted request, which triggers a buffer overflow.
X.org Libx11 1.4.99.902X.org Libx11 1.4.99.901X.org Libx11 1.3.99.901X.org Libx11 1.3.6X.org Libx11 1.2.2X.org Libx11 1.2.1X.org Libx11 1.1.99.1X.org Libx11 1.1X.org Libx11 1.4.4X.org Libx11 1.4.3X.org Libx11 1.3.5X.org Libx11 1.3.4X.org Libx11 1.2X.org Libx11 1.1.6X.org Libx11 1.0.1X.org Libx11 1.5.99.902X.org Libx11 1.4.2X.org Libx11 1.4.1X.org Libx11 1.3.3X.org Libx11 1.3.2X.org Libx11 1.1.5X.org Libx11 1.1.4
6.5
CVSSv2
CVE-2014-8094
Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 up to and including 1.16.x prior to 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a...
X.org Xorg-server 1.14.2X.org Xorg-server 1.10.1X.org Xorg-server 1.8.99.905X.org Xorg-server 1.13.1.901X.org Xorg-server 1.7.5.902X.org Xorg-server 1.7.4.901X.org Xorg-server 1.11.0X.org Xorg-server 1.7.2X.org Xorg-server 1.8.2.901X.org Xorg-server 1.12.1.902X.org Xorg-server 1.13.3X.org Xorg-server 1.10.6X.org Xorg-server 1.14.1.902X.org Xorg-server 1.11.3X.org Xorg-server 1.14.4.901X.org Xorg-server 1.10.4X.org Xorg-server 1.9.99.903X.org Xorg-server 1.16.0X.org Xorg-server 1.14.4X.org Xorg-server 1.10.99.901X.org Xorg-server 1.14.5.901X.org Xorg-server 1.12.3.901
7.2
CVSSv2
CVE-2006-4447
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceed...
X.org X11r6 6.8.1X.org X11r6 6.8.2X.org Xload 1.0.0X.org Xorg-server 1.02 R5X.org Emu-linux-x87-xlibs 7.0 R1X.org X11r6 6.7.0X.org X11r6 6.8X.org Xf86dga 1.0.0X.org Xinit 1.0.2 R5X.org X11r7 1.0X.org X11r7 1.0.1X.org Xterm 214X.org X11r7 1.0.2X.org Xdm 1.0.3
6.5
CVSSv2
CVE-2014-8103
X.Org Server (aka xserver and xorg-server) 1.15.0 up to and including 1.16.x prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_q...
X.org Xorg-server 1.16.0X.org Xorg-server 1.15.2X.org Xorg-server 1.16.1X.org Xorg-server 1.15.1X.org Xorg-server 1.16.1.901X.org Xorg-server 1.15.0X.org Xorg-server 1.15.0.901X.org Xorg-server 1.16.2.901X.org Xorg-server 1.16.0.901X.org Xorg-server 1.15.99.902X.org Xorg-server 1.16.2X.org Xorg-server 1.15.99.903X.org Xorg-server 1.15.99.904X.org Xorg-server 1.16.2.99.901X.org Xorg-server 1.15.99.901
3.6
CVSSv2
CVE-2015-3164
The authentication setup in XWayland 1.16.x and 1.17.x prior to 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
Opensuse Opensuse 13.2X.org Xorg-server 1.16.3X.org Xorg-server 1.16.4X.org Xorg-server 1.16.0X.org Xorg-server 1.16.1X.org Xorg-server 1.17.0X.org Xorg-server 1.17.1X.org Xorg-server 1.16.99.901X.org Xorg-server 1.16.99.902X.org Xorg-server 1.16.2X.org Xorg-server 1.16.1.901X.org Xorg-server 1.16.2.901
2.1
CVSSv2
CVE-2006-1526
Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows malicious users to cause a denial of service (crash), as demonstrated by the (1) XRenderCompositeTriStrip and (2) XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, whic...
X.org X11r6 6.9X.org X11r6 6.8X.org X11r6 6.8.1X.org X11r6 6.7.0
4.6
CVSSv2
CVE-2012-0064
xkeyboard-config prior to 2.5 in X.Org prior to 7.6 enables certain XKB debugging functions by default, which allows physically proximate malicious users to bypass an X screen lock via keyboard combinations that break the input grab.
Xkeyboard Config Project Xkeyboard-config 2.0X X.org X11 1.0X X.org X11 3.0X X.org X11 4.0X X.org X11 5.0X X.org X11 7.1X X.org X11 7.2X X.org X11 7.3X X.org X11 7.4X X.org X11 6.5.1X X.org X11 6.6X X.org X11 6.7X X.org X11 6.8Xkeyboard Config Project Xkeyboard-configXkeyboard Config Project Xkeyboard-config 2.2X X.org X11 6.0X X.org X11 6.3X X.org X11 6.8.2X X.org X11 7.0X X.org X11 7.5Xkeyboard Config Project Xkeyboard-config 2.3Xkeyboard Config Project Xkeyboard-config 2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook