x.org xorg-server 1.16.3 vulnerabilities and exploits

(subscribe to this query)

The authentication setup in XWayland 1.16.x and 1.17.x prior to 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.

Opensuse Opensuse 13.2 X.org Xorg-server 1.16.3 X.org Xorg-server 1.16.4 X.org Xorg-server 1.16.0 X.org Xorg-server 1.16.1 X.org Xorg-server 1.17.0 X.org Xorg-server 1.17.1 X.org Xorg-server 1.16.99.901 X.org Xorg-server 1.16.99.902 X.org Xorg-server 1.16.2 X.org Xorg-server 1.16.1.901 X.org Xorg-server 1.16.2.901

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 up to and including 1.16.x prior to 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a...

X.Org Server (aka xserver and xorg-server) 1.15.0 up to and including 1.16.x prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_q...

X.org Xorg-server 1.16.0 X.org Xorg-server 1.15.2 X.org Xorg-server 1.16.1 X.org Xorg-server 1.15.1 X.org Xorg-server 1.16.1.901 X.org Xorg-server 1.15.0 X.org Xorg-server 1.15.0.901 X.org Xorg-server 1.16.2.901 X.org Xorg-server 1.16.0.901 X.org Xorg-server 1.15.99.902 X.org Xorg-server 1.16.2 X.org Xorg-server 1.15.99.903 X.org Xorg-server 1.15.99.904 X.org Xorg-server 1.16.2.99.901 X.org Xorg-server 1.15.99.901

X.Org Server (aka xserver and xorg-server) prior to 1.16.3 and 1.17.x prior to 1.17.1 allows remote malicious users to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.

X.org Xorg-server 1.17.0 X.org Xorg-server Opensuse Opensuse 13.2 Opensuse Opensuse 13.1

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) ProcPu...

X.org X11 1.0 X.org Xorg-server

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) prior to 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote malicious users to cause a denial of ser...

X.org Xorg-server X.org X11 5.0

The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a...

X.org Xfree86 4.2.0 X.org Xorg-server X.org X11 6.7

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code vi...

X.org X11 6.7 X.org Xorg-server X.org Xfree86 4.0

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via ...

X.org X11 6.7 X.org Xorg-server X.org Xfree86 4.0

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via ...

X.org Xfree86 4.0.1 X.org Xorg-server X.org X11 6.7

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook