Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 55

Export CSV
CVE-2013-1994

openchrome: Multiple integer overflows leading to heap-based bufer overflows

Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) uniDRIOpenConnection and (2) uniDRIGetClientDriverName functions.

CVSS 2.0 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Openchrome Redhat X
Products
Openchrome Enterprise Linux Libchromexvmc and 1 more
CVE-2013-1996

libFS: Sign extension issues resulting in heap-based buffer overflow

X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.

CVSS 2.0 · 6.8 Medium EPSS 1.3% KEV · Not listed
Vendors
X
Products
Libfs
CVE-2013-1997

libX11: Multiple Array Index error leading to heap-based OOB write

Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libx11
CVE-2013-1999

libXvMC: Array Index error leading to heap-based OOB write

Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function.

CVSS 2.0 · 6.8 Medium EPSS 2.3% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxvmc
CVE-2013-2000

libXxf86dga: Array Index error leading to heap-based OOB write

Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxxf86dga
CVE-2013-2001

libXxf86vm: Multiple Array Index error leading to heap-based OOB write

Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxxf86vm
CVE-2013-2002

libXt: Array Index error leading to heap-based OOB write

Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.

CVSS 2.0 · 6.8 Medium EPSS 3.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxt
CVE-2013-2003

libXcursor: Integer overflow leading to heap-based buffer overflow

Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxcursor
CVE-2013-2004

libX11: unbounded recursion leading to stack-overflow

The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libx11
CVE-2013-2062

libXp: Integer overflow leading to heap-based buffer overflow

Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XpGetAttributes, (2) XpGetOneAttribute, (3) XpGetPrinterList, and (4) XpQueryScreens functions.

CVSS 2.0 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxp
CVE-2013-2063

libXtst: Integer overflow leading to heap-based buffer overlow

Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XRecordGetContext function.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxtst
CVE-2013-2064

libxcb: Integer overflow leading to heap-based buffer overflow

Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.

CVSS 2.0 · 6.8 Medium EPSS 2.5% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2013-2066

libXv: Array Index error leading to heap-based OOB write

Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.

CVSS 2.0 · 6.8 Medium EPSS 2.3% KEV · Not listed
Vendors
Redhat X X.org
Products
Enterprise Linux Libxv Libxv
CVE-2013-2179

xorg-x11-xdm: NULL pointer dereference (DoS) when verifying user credentials in FIPS-140 mode or using glibc >= 2.17

X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by attempting to log into an account whose password field contains invalid characters, as demonstrated using the crypt function from glibc 2.17 and later with (1) the "!" character in the salt portion of a password field or (2) a password that has been encrypted using DES or MD5 in FIPS-140 mode.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
X
Products
X Display Manager
CVE-2013-4396

xorg-x11-server: use-after-free flaw when handling ImageText requests

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

CVSS 2.0 · 6.5 Medium EPSS 4.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X.org X11
CVE-2013-6462

libXfont: stack-based buffer overflow flaw when parsing Glyph Bitmap Distribution Format (BDF) fonts

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

CVSS 2.0 · 9.3 Critical EPSS 10.3% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxfont
CVE-2013-2005

libXt: Memory corruption due to unchecked use of unchecked function pointers

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxt
CVE-2010-1166

Xorg: X server Render extension memory corruption

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.

CVSS 2.0 · 7.1 High EPSS 5.4% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X.org
CVE-2010-4819

X.org: ProcRenderAddGlyphs input sanitization flaw

The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X.org-xserver
CVE-2011-0465

xorg: xrdb code execution via crafted X client hostname

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

CVSS 2.0 · 9.3 Critical EPSS 5.8% KEV · Not listed
Vendors
Matthias Hopf Redhat X
Products
Xrdb Enterprise Linux X11