Search CVE reports
11 – 20 of 163 results
A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially...
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X...
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or...
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code...
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or...
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X Clients to crash the X server or...
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potentially execute code in the X server context.
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
7 affected packages
xorg, xorg-server, xwayland, xorg-server-hwe-16.04, xorg-server-hwe-18.04...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | Not affected | Not affected | Not affected | Not affected | Not affected |
| xorg-server | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xwayland | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| xorg-server-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-server-hwe-18.04 | Not in release | Not in release | Not in release | — | Needs evaluation |
| xorg-hwe-16.04 | Not in release | Not in release | Not in release | — | — |
| xorg-hwe-18.04 | Not in release | Not in release | Not in release | — | Not affected |