Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 211

Export CSV
CVE-2014-8092

xorg-x11-server: integer overflow in X11 core protocol requests when calculating memory needs for requests

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) ProcPutImage, (2) GetHosts, (3) RegionSizeof, or (4) REQUEST_FIXED_SIZE function, which triggers an out-of-bounds read or write.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X11 X Server
CVE-2014-8093

xorg-x11-server: integer overflow in GLX extension requests when calculating memory needs for requests

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X11 X Server and 1 more
CVE-2014-8094

xorg-x11-server: integer overflow in DRI2 extension function ProcDRI2GetBuffers()

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write.

CVSS 2.0 · 6.5 Medium EPSS 4.3% KEV · Not listed
Vendors
Debian Oracle Redhat and 1 more
Products
Debian Linux Solaris Enterprise Linux and 1 more
CVE-2017-12180

xorg-x11-server: unvalidated lengths in XFree86 VidModeExtension

xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2022-2319

xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access

A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request length.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X Server
CVE-2017-12186

xorg-x11-server: unvalidated lengths in X-Resource extension

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.3% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12185

xorg-x11-server: unvalidated lengths in MIT-SCREEN-SAVER extension

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12184

xorg-x11-server: unvalidated lengths in XINERAMA extension

xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12183

xorg-x11-server: unvalidated lengths in XFIXES extension

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12182

xorg-x11-server: unvalidated lengths in XFree86 DRI extension

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12181

xorg-x11-server: unvalidated lengths in XFree86 DGA extension

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2017-12179

xorg-x11-server: Integer overflow and unvalidated length in (S)ProcXIBarrierReleasePointer

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.4% KEV · Not listed
Vendors
Debian X.org
Products
Debian Linux X Server
CVE-2014-8095

xorg-x11-server: out of bounds access due to not validating length or offset values in XInput extension

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXChangeDeviceControl, (2) ProcXChangeDeviceControl, (3) ProcXChangeFeedbackControl, (4) ProcXSendExtensionEvent, (5) SProcXIAllowEvents, (6) SProcXIChangeCursor, (7) ProcXIChangeHierarchy, (8) SProcXIGetClientPointer, (9) SProcXIGrabDevice, (10) SProcXIUngrabDevice, (11) ProcXIUngrabDevice, (12) SProcXIPassiveGrabDevice, (13) ProcXIPassiveGrabDevice, (14) SProcXIPassiveUngrabDevice, (15) ProcXIPassiveUngrabDevice, (16) SProcXListDeviceProperties, (17) SProcXDeleteDeviceProperty, (18) SProcXIListProperties, (19) SProcXIDeleteProperty, (20) SProcXIGetProperty, (21) SProcXIQueryDevice, (22) SProcXIQueryPointer, (23) SProcXISelectEvents, (24) SProcXISetClientPointer, (25) SProcXISetFocus, (26) SProcXIGetFocus, or (27) SProcXIWarpPointer function.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Debian Redhat X.org
Products
Debian Linux Enterprise Linux X11 and 1 more
CVE-2014-8096

xorg-x11-server: out of bounds access due to not validating length or offset values in XC-MISC extension

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value.

CVSS 2.0 · 6.5 Medium EPSS 4.6% KEV · Not listed
Vendors
Debian Redhat X.org
Products
Debian Linux Enterprise Linux X11 and 1 more
CVE-2014-8097

xorg-x11-server: out of bounds access due to not validating length or offset values in DBE extension

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) ProcDbeSwapBuffers or (2) SProcDbeSwapBuffers function.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X11 X Server
CVE-2014-8098

xorg-x11-server: out of bounds access due to not validating length or offset values in GLX extension

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) __glXDisp_Render, (2) __glXDisp_RenderLarge, (3) __glXDispSwap_VendorPrivate, (4) __glXDispSwap_VendorPrivateWithReply, (5) set_client_info, (6) __glXDispSwap_SetClientInfoARB, (7) DoSwapInterval, (8) DoGetProgramString, (9) DoGetString, (10) __glXDispSwap_RenderMode, (11) __glXDisp_GetCompressedTexImage, (12) __glXDispSwap_GetCompressedTexImage, (13) __glXDisp_FeedbackBuffer, (14) __glXDispSwap_FeedbackBuffer, (15) __glXDisp_SelectBuffer, (16) __glXDispSwap_SelectBuffer, (17) __glXDisp_Flush, (18) __glXDispSwap_Flush, (19) __glXDisp_Finish, (20) __glXDispSwap_Finish, (21) __glXDisp_ReadPixels, (22) __glXDispSwap_ReadPixels, (23) __glXDisp_GetTexImage, (24) __glXDispSwap_GetTexImage, (25) __glXDisp_GetPolygonStipple, (26) __glXDispSwap_GetPolygonStipple, (27) __glXDisp_GetSeparableFilter, (28) __glXDisp_GetSeparableFilterEXT, (29) __glXDisp_GetConvolutionFilter, (30) __glXDisp_GetConvolutionFilterEXT, (31) __glXDisp_GetHistogram, (32) __glXDisp_GetHistogramEXT, (33) __glXDisp_GetMinmax, (34) __glXDisp_GetMinmaxEXT, (35) __glXDisp_GetColorTable, (36) __glXDisp_GetColorTableSGI, (37) GetSeparableFilter, (38) GetConvolutionFilter, (39) GetHistogram, (40) GetMinmax, or (41) GetColorTable function.

CVSS 2.0 · 6.5 Medium EPSS 5.2% KEV · Not listed
Vendors
Debian Redhat X.org
Products
Debian Linux Enterprise Linux X11 and 2 more
CVE-2014-8099

xorg-x11-server: out of bounds access due to not validating length or offset values in XVideo extension

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.

CVSS 2.0 · 6.5 Medium EPSS 4.3% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X11 X Server and 1 more
CVE-2014-8100

xorg-x11-server: out of bounds access due to not validating length or offset values in Render extension

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) ProcRenderQueryVersion, (2) SProcRenderQueryVersion, (3) SProcRenderQueryPictFormats, (4) SProcRenderQueryPictIndexValues, (5) SProcRenderCreatePicture, (6) SProcRenderChangePicture, (7) SProcRenderSetPictureClipRectangles, (8) SProcRenderFreePicture, (9) SProcRenderComposite, (10) SProcRenderScale, (11) SProcRenderCreateGlyphSet, (12) SProcRenderReferenceGlyphSet, (13) SProcRenderFreeGlyphSet, (14) SProcRenderFreeGlyphs, or (15) SProcRenderCompositeGlyphs function.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X11 X Server and 1 more
CVE-2014-8101

xorg-x11-server: out of bounds access due to not validating length or offset values in RandR extension

The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcRRQueryVersion, (2) SProcRRGetScreenInfo, (3) SProcRRSelectInput, or (4) SProcRRConfigureOutputProperty function.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X11 X Server and 1 more
CVE-2014-8102

xorg-x11-server: out of bounds access due to not validating length or offset values in XFixes extension

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length value.

CVSS 2.0 · 6.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Debian Redhat X.org
Products
Debian Linux Enterprise Linux X11 and 1 more