17 results · Feed
-
Medium 5.9
It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a seri…
-
Unscored —
xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing maliciou…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to caus…
-
Unscored —
xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X clien…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cau…
-
Unscored —
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing m…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cau…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X …
-
Unscored —
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client t…
-
Unscored —
In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overf…
-
Unscored —
In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared…
-
Unscored —
Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed auth…
-
Unscored —
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the contex…