Поиск уязвимостей
Количество 47
Количество 47
CVE-2024-21885
Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent
CVE-2024-21885
A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent fu ...
GHSA-2x93-8973-5mgq
A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.
BDU:2024-00667
Уязвимость функции XISendDeviceHierarchyEvent реализации протокола Wayland для X.Org XWayland, реализации сервера X Window System X.Org Server, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVE-2023-6816
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
CVE-2023-6816
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
CVE-2023-6816
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
CVE-2023-6816
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
CVE-2023-6816
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQuer ...
ALT-PU-2024-5972
ALT-PU-2024-5972: package `xorg-xwayland` update to version 23.2.4-alt1
ALT-PU-2024-18132
ALT-PU-2024-18132: package `xorg-server` update to version 21.1.11-alt1
GHSA-pcjv-393q-rqf2
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
BDU:2024-00405
Уязвимость функций DeviceFocusEvent и XIQueryPointer реализации сервера X Window System X.Org Server, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
CVE-2024-21886
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
CVE-2024-21886
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
CVE-2024-21886
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
CVE-2024-21886
CVE-2024-21886
A heap buffer overflow flaw was found in the DisableDevice function in ...
CVE-2024-0229
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.
CVE-2024-0229
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-21885 Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent | CVSS3: 7.8 | 1% Низкий | 17 дней назад | |
CVE-2024-21885 A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent fu ... | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад | |
GHSA-2x93-8973-5mgq A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments. | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад | |
BDU:2024-00667 Уязвимость функции XISendDeviceHierarchyEvent реализации протокола Wayland для X.Org XWayland, реализации сервера X Window System X.Org Server, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код | CVSS3: 7.8 | 1% Низкий | почти 3 года назад | |
CVE-2023-6816 A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used. | CVSS3: 9.8 | 2% Низкий | почти 3 года назад | |
CVE-2023-6816 A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used. | CVSS3: 9.8 | 2% Низкий | почти 3 года назад | |
CVE-2023-6816 A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used. | CVSS3: 9.8 | 2% Низкий | почти 3 года назад | |
CVE-2023-6816 Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer | CVSS3: 9.8 | 2% Низкий | 9 месяцев назад | |
CVE-2023-6816 A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQuer ... | CVSS3: 9.8 | 2% Низкий | почти 3 года назад | |
ALT-PU-2024-5972 ALT-PU-2024-5972: package `xorg-xwayland` update to version 23.2.4-alt1 | CVSS3: 9.8 | больше 2 лет назад | ||
ALT-PU-2024-18132 ALT-PU-2024-18132: package `xorg-server` update to version 21.1.11-alt1 | CVSS3: 9.8 | почти 3 года назад | ||
GHSA-pcjv-393q-rqf2 A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used. | CVSS3: 7.8 | 2% Низкий | почти 3 года назад | |
BDU:2024-00405 Уязвимость функций DeviceFocusEvent и XIQueryPointer реализации сервера X Window System X.Org Server, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.8 | 2% Низкий | почти 3 года назад | |
CVE-2024-21886 A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments. | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад | |
CVE-2024-21886 A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments. | CVSS3: 7.8 | 1% Низкий | почти 3 года назад | |
CVE-2024-21886 A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments. | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад | |
CVSS3: 7.8 | 1% Низкий | около 2 лет назад | ||
CVE-2024-21886 A heap buffer overflow flaw was found in the DisableDevice function in ... | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад | |
CVE-2024-0229 An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments. | CVSS3: 7.8 | 1% Низкий | почти 3 года назад | |
CVE-2024-0229 An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments. | CVSS3: 7.8 | 1% Низкий | почти 3 года назад |
Уязвимостей на страницу