Xserver

CVEs (124)

• CVE-2023-6816CriJan 18, 2024
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.02

  A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number…

• CVE-2017-12187CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.03

  xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12186CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12185CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12184CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12183CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12182CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12181CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12180CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12179CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12178CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12177CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-12176CriJan 24, 2018
  Xorg

  Server
  risk 0.64cvss 9.8epss 0.04

  xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

• CVE-2017-10971HigJul 6, 2017
  Xorg

  Xserver
  risk 0.58cvss 8.8epss 0.04

  In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.

• CVE-2022-46344HigDec 14, 2022
  Fedoraproject

  Fedora
  risk 0.57cvss 8.8epss 0.03

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on…

• CVE-2022-46343HigDec 14, 2022
  Fedoraproject

  Fedora
  risk 0.57cvss 8.8epss 0.02

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and…

• CVE-2022-46342HigDec 14, 2022
  Fedoraproject

  Fedora
  risk 0.57cvss 8.8epss 0.01

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se

• CVE-2022-46341HigDec 14, 2022
  Fedoraproject

  Fedora
  risk 0.57cvss 8.8epss 0.03

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is…

• CVE-2022-46340HigDec 14, 2022
  Fedoraproject

  Fedora
  risk 0.57cvss 8.8epss 0.03

  A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can…

• CVE-2019-17624HigOct 16, 2019
  Xorg

  Xserver
  risk 0.54cvss 7.8epss 0.04

  "" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sending ct.c_char 1000 times, an attacker can cause a denial of service (application crash) or possibly have unspecified other impact. Note: It is disputed if the…