Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10,090

Export CSV
CVE-2017-13721

xorg-x11-server: Insufficient validation of shmseg resource id

In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12178

xorg-x11-server: wrong extra length check in ProcXIChangeHierarchy

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.4% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12186

xorg-x11-server: unvalidated lengths in X-Resource extension

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.3% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12177

xorg-x11-server: Unvalidated variable-length request in ProcDbeGetVisualInfo

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.4% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12176

xorg-x11-server: Unvalidated extra length in ProcEstablishConnection

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2018-14665

xorg-x11-server: Incorrect permission check in Xorg X server allows for privilege escalation

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

CVSS 3.0 · 6.6 Medium EPSS 27.2% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 7 more
CVE-2017-12181

xorg-x11-server: unvalidated lengths in XFree86 DGA extension

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12182

xorg-x11-server: unvalidated lengths in XFree86 DRI extension

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12183

xorg-x11-server: unvalidated lengths in XFIXES extension

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12184

xorg-x11-server: unvalidated lengths in XINERAMA extension

xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-2624

xorg-x11-server: timing attack against MIT Cookie

It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2020-14347

xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c

A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 1 more
CVE-2014-8095

xorg-x11-server: out of bounds access due to not validating length or offset values in XInput extension

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXChangeDeviceControl, (2) ProcXChangeDeviceControl, (3) ProcXChangeFeedbackControl, (4) ProcXSendExtensionEvent, (5) SProcXIAllowEvents, (6) SProcXIChangeCursor, (7) ProcXIChangeHierarchy, (8) SProcXIGetClientPointer, (9) SProcXIGrabDevice, (10) SProcXIUngrabDevice, (11) ProcXIUngrabDevice, (12) SProcXIPassiveGrabDevice, (13) ProcXIPassiveGrabDevice, (14) SProcXIPassiveUngrabDevice, (15) ProcXIPassiveUngrabDevice, (16) SProcXListDeviceProperties, (17) SProcXDeleteDeviceProperty, (18) SProcXIListProperties, (19) SProcXIDeleteProperty, (20) SProcXIGetProperty, (21) SProcXIQueryDevice, (22) SProcXIQueryPointer, (23) SProcXISelectEvents, (24) SProcXISetClientPointer, (25) SProcXISetFocus, (26) SProcXIGetFocus, or (27) SProcXIWarpPointer function.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Debian Redhat X.org
Products
Debian Linux Enterprise Linux X11 and 1 more
CVE-2014-8102

xorg-x11-server: out of bounds access due to not validating length or offset values in XFixes extension

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length value.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Debian Redhat X.org
Products
Debian Linux Enterprise Linux X11 and 1 more
CVE-2014-8098

xorg-x11-server: out of bounds access due to not validating length or offset values in GLX extension

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) __glXDisp_Render, (2) __glXDisp_RenderLarge, (3) __glXDispSwap_VendorPrivate, (4) __glXDispSwap_VendorPrivateWithReply, (5) set_client_info, (6) __glXDispSwap_SetClientInfoARB, (7) DoSwapInterval, (8) DoGetProgramString, (9) DoGetString, (10) __glXDispSwap_RenderMode, (11) __glXDisp_GetCompressedTexImage, (12) __glXDispSwap_GetCompressedTexImage, (13) __glXDisp_FeedbackBuffer, (14) __glXDispSwap_FeedbackBuffer, (15) __glXDisp_SelectBuffer, (16) __glXDispSwap_SelectBuffer, (17) __glXDisp_Flush, (18) __glXDispSwap_Flush, (19) __glXDisp_Finish, (20) __glXDispSwap_Finish, (21) __glXDisp_ReadPixels, (22) __glXDispSwap_ReadPixels, (23) __glXDisp_GetTexImage, (24) __glXDispSwap_GetTexImage, (25) __glXDisp_GetPolygonStipple, (26) __glXDispSwap_GetPolygonStipple, (27) __glXDisp_GetSeparableFilter, (28) __glXDisp_GetSeparableFilterEXT, (29) __glXDisp_GetConvolutionFilter, (30) __glXDisp_GetConvolutionFilterEXT, (31) __glXDisp_GetHistogram, (32) __glXDisp_GetHistogramEXT, (33) __glXDisp_GetMinmax, (34) __glXDisp_GetMinmaxEXT, (35) __glXDisp_GetColorTable, (36) __glXDisp_GetColorTableSGI, (37) GetSeparableFilter, (38) GetConvolutionFilter, (39) GetHistogram, (40) GetMinmax, or (41) GetColorTable function.

CVSS 2.0 · 6.5 Medium EPSS 5.2% KEV · Not listed
Vendors
Debian Redhat X.org
Products
Debian Linux Enterprise Linux X11 and 2 more
CVE-2014-8094

xorg-x11-server: integer overflow in DRI2 extension function ProcDRI2GetBuffers()

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write.

CVSS 2.0 · 6.5 Medium EPSS 4.3% KEV · Not listed
Vendors
Debian Oracle Redhat and 1 more
Products
Debian Linux Solaris Enterprise Linux and 1 more
CVE-2014-8096

xorg-x11-server: out of bounds access due to not validating length or offset values in XC-MISC extension

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value.

CVSS 2.0 · 6.5 Medium EPSS 4.6% KEV · Not listed
Vendors
Debian Redhat X.org
Products
Debian Linux Enterprise Linux X11 and 1 more
CVE-2021-20190

jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 8.1 High EPSS 7.6% KEV · Not listed
Vendors
Apache Debian Fasterxml and 3 more
Products
Nifi Debian Linux Jackson-databind and 8 more
CVE-2019-12814

jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server.

CVSS 3.1 · 5.9 Medium EPSS 10.9% KEV · Not listed
Vendors
Debian Fasterxml Redhat
Products
Debian Linux Jackson-databind Amq Streams and 9 more