x.org Vulnerability Advisory Catalog

Total 125 security vulnerabilities recorded for x.org software and firmware.

← Back to All Vendors
CVE-2016-7950 CRITICAL
Component: libxrender

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors invol...

📅 2016-12-13
CVSS 9.8 Dossier →
CVE-2016-7949 CRITICAL
Component: libxrender

Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to tr...

📅 2016-12-13
CVSS 9.8 Dossier →
CVE-2016-7948 CRITICAL
Component: libxrandr

X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data....

📅 2016-12-13
CVSS 9.8 Dossier →
Component: libxi

X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields....

📅 2016-12-13
CVSS 7.5 Dossier →
CVE-2016-7944 CRITICAL
Component: libxfixes

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, wh...

📅 2016-12-13
CVSS 9.8 Dossier →
CVE-2016-5407 CRITICAL
Component: libxv

The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access ...

📅 2016-12-13
CVSS 9.8 Dossier →
Component: x_server

The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xorg-server) before 1.16.4 allows attackers to cause a denial of service ...

📅 2016-12-13
CVSS 7.5 Dossier →
CVE-2013-7439 UNKNOWN
Component: libx11

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote att...

📅 2015-04-16
CVSS 7.5 Dossier →
CVE-2015-0255 UNKNOWN
Component: x_server

X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process...

📅 2015-02-13
CVSS 6.4 Dossier →
CVE-2014-8103 UNKNOWN
Component: x_server

X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8102 UNKNOWN
Component: x_server

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver a...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8101 UNKNOWN
Component: xfree86

The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8100 UNKNOWN
Component: xfree86

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allo...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8099 UNKNOWN
Component: x11

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allo...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8097 UNKNOWN
Component: x_server

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authentic...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8096 UNKNOWN
Component: x11

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-ser...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8094 UNKNOWN
Component: x_server

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1....

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8093 UNKNOWN
Component: x11

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-s...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8092 UNKNOWN
Component: x11

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote aut...

📅 2014-12-10
CVSS 6.5 Dossier →
CVE-2014-8091 UNKNOWN
Component: x_server

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentica...

📅 2014-12-10
CVSS 4.3 Dossier →
CVE-2011-4613 UNKNOWN
Component: x_server

The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allow...

📅 2014-02-05
CVSS 4.6 Dossier →
CVE-2013-1998 UNKNOWN
Component: libxi

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code vi...

📅 2013-06-15
CVSS 6.8 Dossier →
CVE-2013-1995 UNKNOWN
Component: libxi

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected...

📅 2013-06-15
CVSS 6.8 Dossier →
CVE-2013-1984 UNKNOWN
Component: libxi

Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vec...

📅 2013-06-15
CVSS 6.8 Dossier →
Page 4 of 6 (125 Total Records)