Search CVE reports
111 – 120 of 163 results
In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients...
8 affected packages
xorg, xorg-hwe-16.04, xorg-server, xorg-server-hwe-16.04, xorg-server-lts-utopic...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | — | — | — | — | — |
| xorg-hwe-16.04 | — | — | — | — | — |
| xorg-server | — | — | — | — | — |
| xorg-server-hwe-16.04 | — | — | — | — | — |
| xorg-server-lts-utopic | — | — | — | — | — |
| xorg-server-lts-vivid | — | — | — | — | — |
| xorg-server-lts-wily | — | — | — | — | — |
| xorg-server-lts-xenial | — | — | — | — | — |
Some fixes available 5 of 6
Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.
8 affected packages
xorg, xorg-hwe-16.04, xorg-server, xorg-server-hwe-16.04, xorg-server-lts-utopic...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | — | — | — | — | — |
| xorg-hwe-16.04 | — | — | — | — | — |
| xorg-server | — | — | — | — | — |
| xorg-server-hwe-16.04 | — | — | — | — | — |
| xorg-server-lts-utopic | — | — | — | — | — |
| xorg-server-lts-vivid | — | — | — | — | — |
| xorg-server-lts-wily | — | — | — | — | — |
| xorg-server-lts-xenial | — | — | — | — | — |
Some fixes available 5 of 6
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.
8 affected packages
xorg, xorg-hwe-16.04, xorg-server, xorg-server-hwe-16.04, xorg-server-lts-utopic...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg | — | — | — | — | — |
| xorg-hwe-16.04 | — | — | — | — | — |
| xorg-server | — | — | — | — | — |
| xorg-server-hwe-16.04 | — | — | — | — | — |
| xorg-server-lts-utopic | — | — | — | — | — |
| xorg-server-lts-vivid | — | — | — | — | — |
| xorg-server-lts-wily | — | — | — | — | — |
| xorg-server-lts-xenial | — | — | — | — | — |
Some fixes available 4 of 10
It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp()...
10 affected packages
xorg-server, xorg-server-hwe-16.04, xorg-server-lts-quantal, xorg-server-lts-raring, xorg-server-lts-saucy...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg-server | — | — | — | — | — |
| xorg-server-hwe-16.04 | — | — | — | — | — |
| xorg-server-lts-quantal | — | — | — | — | — |
| xorg-server-lts-raring | — | — | — | — | — |
| xorg-server-lts-saucy | — | — | — | — | — |
| xorg-server-lts-trusty | — | — | — | — | — |
| xorg-server-lts-utopic | — | — | — | — | — |
| xorg-server-lts-vivid | — | — | — | — | — |
| xorg-server-lts-wily | — | — | — | — | — |
| xorg-server-lts-xenial | — | — | — | — | — |
Some fixes available 5 of 9
The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xorg-server) before 1.16.4 allows attackers to cause a denial of service (divide-by-zero and crash) via a zero-height PutImage request.
6 affected packages
xorg-server, xorg-server-lts-quantal, xorg-server-lts-raring, xorg-server-lts-saucy, xorg-server-lts-trusty, xorg-server-lts-utopic
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg-server | — | — | — | — | — |
| xorg-server-lts-quantal | — | — | — | — | — |
| xorg-server-lts-raring | — | — | — | — | — |
| xorg-server-lts-saucy | — | — | — | — | — |
| xorg-server-lts-trusty | — | — | — | — | — |
| xorg-server-lts-utopic | — | — | — | — | — |
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
7 affected packages
xorg-server, xorg-server-lts-quantal, xorg-server-lts-raring, xorg-server-lts-saucy, xorg-server-lts-trusty...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg-server | — | — | — | — | — |
| xorg-server-lts-quantal | — | — | — | — | — |
| xorg-server-lts-raring | — | — | — | — | — |
| xorg-server-lts-saucy | — | — | — | — | — |
| xorg-server-lts-trusty | — | — | — | — | — |
| xorg-server-lts-utopic | — | — | — | — | — |
| xorg-server-lts-vivid | — | — | — | — | — |
Some fixes available 31 of 45
X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value...
7 affected packages
xorg-server, xorg-server-lts-quantal, xorg-server-lts-raring, xorg-server-lts-saucy, xorg-server-lts-trusty...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg-server | Fixed | Fixed | Fixed | Fixed | Fixed |
| xorg-server-lts-quantal | Not in release | Not in release | Not in release | Not in release | Not in release |
| xorg-server-lts-raring | Not in release | Not in release | Not in release | Not in release | Not in release |
| xorg-server-lts-saucy | Not in release | Not in release | Not in release | Not in release | Not in release |
| xorg-server-lts-trusty | Not in release | Not in release | Not in release | Not in release | Not in release |
| xorg-server-lts-utopic | Not in release | Not in release | Not in release | Not in release | Not in release |
| vnc4 | Not in release | Not in release | Not in release | Not in release | Vulnerable |
Some fixes available 4 of 5
X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or...
2 affected packages
xorg-server, xorg-server-lts-trusty
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg-server | — | — | — | — | — |
| xorg-server-lts-trusty | — | — | — | — | — |
Some fixes available 4 of 5
The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a...
2 affected packages
xorg-server, xorg-server-lts-trusty
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg-server | — | — | — | — | — |
| xorg-server-lts-trusty | — | — | — | — | — |
Some fixes available 4 of 5
The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or...
2 affected packages
xorg-server, xorg-server-lts-trusty
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xorg-server | — | — | — | — | — |
| xorg-server-lts-trusty | — | — | — | — | — |