Summary
Ein Angreifer kann mehrere Schwachstellen in Xwayland und X.Org X11 ausnutzen, um einen Denial of Service Angriff durchzuführen, möglicherweise vertrauliche Informationen offenzulegen oder den Speicher zu beschädigen.
Product
Xwayland ist ein X-Server für die Ausführung von X-Clients unter Wayland Display Servern. Wayland ist ein Ersatz für X.11 Display-Server.
Das X Window System dient der Erzeugung grafischer Oberflächen auf Unix Systemen.
Vulnerabilities 8
-
High 8.5
A stack buffer overflow in ProcXTestFakeInput DeviceValuator handling in X.Org xwayland before 24.1.15 and X server be…
-
High 8.5
A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland b…
-
High 7.8
X.Org Server EDID DS_RANGES Out-Of-Bounds Write
A buffer overflow in handling EDID Display-Range descriptors in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by malicious monitors to crash the x server or execute cote.
-
High 7.8
X.Org Server XvShmPutImage Shared-Memory Bounds Overflow
Incorrectly handled negative sizes when processing ProcXvShmPutImage requests in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by local authenticated X clients to crash the X server or execute code.
-
High 7.8
X.Org Server XvQueryImageAttributes Negative Size Reply
A buffer overread caused by casting a negative integer to CARD32 in XvQueryImageAttributes in X.Org X Server before 21.1.26 and xwayland before 24.1.15 could be used to causes crashes by authenticated X clients.
-
Medium 6.9
X.Org Server glamor Xv Image Size Integer Overflow
A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.
-
Medium 6.9
X.Org Server XRes QueryClientIds Request Size Overflow
A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by attackers on authenticated X clients to crash the server or leak out information.
-
Medium 5.5
Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests in X.Org xwayl…
Revision history
-
#2
Neue Updates von Amazon aufgenommen
-
#1
Initiale Fassung
References
-
X.Org Security Advisory: multiple security issues in X.Org X server vom 2026-11-10
https://lists.x.org/archives/xorg-announce/2026-November/003759.html
-
xorg-server 21.1.26 vom 2026-11-10
https://lists.x.org/archives/xorg-announce/2026-November/003760.html
-
xwayland 24.1.15 vom 2026-11-10
https://lists.x.org/archives/xorg-announce/2026-November/003761.html
-
Fedora Security Advisory FEDORA-2026-F7FBDF5649 vom 2026-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-f7fbdf5649
-
Fedora Security Advisory FEDORA-2026-8700515A09 vom 2026-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-8700515a09
-
Fedora Security Advisory FEDORA-2026-31F03364E3 vom 2026-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-31f03364e3
-
Fedora Security Advisory FEDORA-2026-5B2D4EBFDE vom 2026-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-5b2d4ebfde
-
Fedora Security Advisory FEDORA-2026-68C1586AC2 vom 2026-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-68c1586ac2
-
Fedora Security Advisory FEDORA-2026-7DEFD115FA vom 2026-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-7defd115fa
-
SUSE Security Update SUSE-SU-2026:5178-1 vom 2026-11-11
https://lists.suse.com/pipermail/sle-security-updates/2026-November/030551.html
-
SUSE Security Update SUSE-SU-2026:5180-1 vom 2026-11-11
https://lists.suse.com/pipermail/sle-security-updates/2026-November/030550.html
-
OpenBSD Errata
https://www.openbsd.org/errata80.html
-
Amazon Linux Security Advisory ALAS2-2026-4108 vom 2026-11-12
https://alas.aws.amazon.com/AL2/ALAS2-2026-4108.html