Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 211

Export CSV
CVE-2022-46342

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Enterprise Linux and 1 more
CVE-2022-46341

xorg-x11-server: XIPassiveUngrab out-of-bounds access

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Enterprise Linux and 1 more
CVE-2016-10164

libXpm: Out-of-bounds write in XPM extension parsing

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.

CVSS 3.0 · 9.8 Critical EPSS 7.6% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux Libxpm
CVE-2017-13722

libXfont: Insufficient input validation in pcfread.c

In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxfont
CVE-2017-13720

libXfont: Insufficient input validation in fontdir.c

In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxfont
CVE-2022-3553

X.org Server xquartz X11Controller.m denial of service

A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m of the component xquartz. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier VDB-211053 was assigned to this vulnerability.

CVSS 3.1 · 3.5 Low EPSS 1.7% KEV · Not listed
Vendors
X.org
Products
X Server
CVE-2016-7950

libXrender: Insufficient validation of server responses results out-of-bounds write in XRenderQueryFilters

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxrender
CVE-2016-7953

libXvMC: Insufficient validation of server responses results in buffer underflow

Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string.

CVSS 3.0 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxvmc
CVE-2016-7952

libXtst: Insufficient validation of server responses result in various data mishandlings

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.

CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxtst
CVE-2016-7949

libXrender: Insufficient validation of server responses results in overflow of previously reserved memory

Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.

CVSS 3.0 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxrender
CVE-2016-7948

libXrandr: Insufficient validation of server responses result in various data mishandlings

X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxrandr
CVE-2016-7947

libXrandr: Insufficient validation of server responses result in Integer overflows

Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.

CVSS 3.0 · 9.8 Critical EPSS 3.6% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxrandr
CVE-2016-7946

libXi: Insufficient validation of server responses result in various data mishandlings

X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxi
CVE-2016-7945

libXi: Insufficient validation of server responses result in Integer overflows

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxi
CVE-2016-7944

libXfixes: Insufficient validation of server responses results in Integer overflow

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxfixes
CVE-2016-7943

libX11: Insufficient validation of server responses in FontNames

The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libx11
CVE-2016-7942

libX11: Insufficient validation of server responses in XGetImage()

The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libx11
CVE-2016-5407

libXv: Insufficient validation of server responses results in out-of bounds accesses

The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxv
CVE-2013-7439

libX11: buffer overflow in MakeBigReq macro

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 2 more
CVE-2013-1984

libXi: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux Libxi