Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2010-1166

Xorg: X server Render extension memory corruption

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.

CVSS 2.0 · 7.1 High EPSS 5.4% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X.org
CVE-2010-4819

X.org: ProcRenderAddGlyphs input sanitization flaw

The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X.org-xserver
CVE-2012-0064

xkeyboard-config: screen-saver unlock via xkb debug key actions

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
X Xkeyboard Config Project
Products
X.org X11 Xkeyboard-config
CVE-2012-1699

xorg-x11: DoS and information leak in xfs prior to X11R6.7

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
X Xfree86
Products
X.org X11 Xfree86
CVE-2013-1940

xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat X
Products
Ubuntu Linux Enterprise Linux X.org-xserver
CVE-2013-4396

xorg-x11-server: use-after-free flaw when handling ImageText requests

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

CVSS 2.0 · 6.5 Medium EPSS 4.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X.org X11