Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 55

Export CSV
CVE-2011-2895

BSD compress LZW decoder buffer overflow

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

CVSS 2.0 · 9.3 Critical EPSS 8.4% KEV · Not listed
Vendors
Freebsd Freetype Netbsd and 3 more
Products
Freebsd Freetype Netbsd and 4 more
CVE-2012-0064

xkeyboard-config: screen-saver unlock via xkb debug key actions

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
X Xkeyboard Config Project
Products
X.org X11 Xkeyboard-config
CVE-2012-1699

xorg-x11: DoS and information leak in xfs prior to X11R6.7

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
X Xfree86
Products
X.org X11 Xfree86
CVE-2013-1940

xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat X
Products
Ubuntu Linux Enterprise Linux X.org-xserver
CVE-2013-1981

libX11: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Redhat X
Products
Ubuntu Linux Enterprise Linux Libx11
CVE-2013-1982

libXext: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.

CVSS 2.0 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxext
CVE-2013-1983

libXfixes: Integer overflow leading to heap-based buffer overflow

Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxfixes
CVE-2013-1985

libXinerama: Integer overflow leading to heap-based buffer overflow

Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XineramaQueryScreens function.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxinerama
CVE-2013-1986

libXrandr: Multiple integer overflows leading to heap-based bufer overflows

Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxrandr
CVE-2013-1987

libXrender: Multiple integer overflows leading to heap-based bufer overflows

Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRenderQueryFilters, (2) XRenderQueryFormats, and (3) XRenderQueryPictIndexValues functions.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Opensuse Redhat and 1 more
Products
Ubuntu Linux Opensuse Enterprise Linux and 1 more
CVE-2013-1988

libXRes: Multiple integer overflows leading to heap-based bufer overflows

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxres
CVE-2013-1989

libXv: Multiple integer overflows leading to heap-based bufer overflows

Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvQueryPortAttributes, (2) XvListImageFormats, and (3) XvCreateImage function.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxv
CVE-2013-1990

libXvMC: Multiple integer overflows leading to heap-based buffer overflows

Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxvmc
CVE-2013-1991

libXxf86dga: Multiple integer overflows leading to heap-based buffer overflows

Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XDGAQueryModes and (2) XDGASetMode functions.

CVSS 2.0 · 6.8 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxxf86dga
CVE-2015-9262

libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c

_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.

CVSS 3.0 · 9.8 Critical EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Ansible Tower and 5 more