Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2008-1377

X.org Record and Security extensions memory corruption

The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.

CVSS 2.0 · 9.0 Critical EPSS 2.7% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X11
CVE-2008-1379

X.org MIT-SHM extension arbitrary memory read

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X11
CVE-2008-2360

X.org Render extension AllocateGlyph() heap buffer overflow

Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow.

CVSS 2.0 · 9.0 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X11
CVE-2008-2362

X.org Render extension input validation flaw causing memory corruption

Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.

CVSS 2.0 · 10.0 Critical EPSS 3.6% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux X11
CVE-2011-0465

xorg: xrdb code execution via crafted X client hostname

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

CVSS 2.0 · 9.3 Critical EPSS 5.8% KEV · Not listed
Vendors
Matthias Hopf Redhat X
Products
Xrdb Enterprise Linux X11