Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
x.org x server vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv3
CVE-2020-14360
A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
X.org X Server
7.8
CVSSv3
CVE-2021-4008
A flaw was found in xorg-x11-server in versions prior to 21.1.2 and prior to 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
X.org X Server
X.org X Server 21.1.1
X.org X Server 21.1.0
Fedoraproject Fedora 34
Fedoraproject Fedora 35
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Debian Debian Linux 11.0
7.8
CVSSv3
CVE-2021-4009
A flaw was found in xorg-x11-server in versions prior to 21.1.2 and prior to 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabil...
X.org X Server
X.org X Server 21.1.1
X.org X Server 21.1.0
Fedoraproject Fedora 34
Fedoraproject Fedora 35
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Debian Debian Linux 11.0
7.8
CVSSv3
CVE-2021-4011
A flaw was found in xorg-x11-server in versions prior to 21.1.2 and prior to 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
X.org X Server
X.org X Server 21.1.1
X.org X Server 21.1.0
Fedoraproject Fedora 34
Fedoraproject Fedora 35
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Debian Debian Linux 11.0
NA
CVE-2012-1699
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 prior to 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and...
X X.org X11 6.0
X X.org X11 6.4
X X.org X11 6.5.1
X X.org X11 6.1
X X.org X11 6.3
X X.org X11 6.6
Xfree86 Xfree86
NA
CVE-2007-4990
The swap_char2b function in X.Org X Font Server (xfs) prior to 1.0.5 allows context-dependent malicious users to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped o...
X.org X Font Server
NA
CVE-2014-8094
Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 up to and including 1.16.x prior to 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a...
X.org Xorg-server 1.14.2
X.org Xorg-server 1.10.1
X.org Xorg-server 1.8.99.905
X.org Xorg-server 1.13.1.901
X.org Xorg-server 1.7.5.902
X.org Xorg-server 1.7.4.901
X.org Xorg-server 1.11.0
X.org Xorg-server 1.7.2
X.org Xorg-server 1.8.2.901
X.org Xorg-server 1.12.1.902
X.org Xorg-server 1.13.3
X.org Xorg-server 1.10.6
X.org Xorg-server 1.14.1.902
X.org Xorg-server 1.11.3
X.org Xorg-server 1.14.4.901
X.org Xorg-server 1.10.4
X.org Xorg-server 1.9.99.903
X.org Xorg-server 1.16.0
X.org Xorg-server 1.14.4
X.org Xorg-server 1.10.99.901
X.org Xorg-server 1.14.5.901
X.org Xorg-server 1.12.3.901
NA
CVE-2014-8103
X.Org Server (aka xserver and xorg-server) 1.15.0 up to and including 1.16.x prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_q...
X.org Xorg-server 1.16.0
X.org Xorg-server 1.15.2
X.org Xorg-server 1.16.1
X.org Xorg-server 1.15.1
X.org Xorg-server 1.16.1.901
X.org Xorg-server 1.15.0
X.org Xorg-server 1.15.0.901
X.org Xorg-server 1.16.2.901
X.org Xorg-server 1.16.0.901
X.org Xorg-server 1.15.99.902
X.org Xorg-server 1.16.2
X.org Xorg-server 1.15.99.903
X.org Xorg-server 1.15.99.904
X.org Xorg-server 1.16.2.99.901
X.org Xorg-server 1.15.99.901
NA
CVE-2010-1166
The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macr...
X X.org 7.1
7
CVSSv3
CVE-2023-5574
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-f...
X.org X Server
Redhat Enterprise Linux 7.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injection
CVE-2024-35894
SQL
CVE-2024-5105
CVE-2014-100005
CVE-2024-35895
unauthorized
CVE-2024-22120
CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »