Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

X.Org xorg-serverInteger Overflow

Risk 46
Severity
6.5
Integer Overflow
AV:N/AC:L/Au:S/C:P/I:P/A:P

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write.

First published (updated )
CVE-2014-8094

X.Org xorg-serverBuffer Overflow

Risk 46
Severity
6.5
Buffer Overflow
AV:N/AC:L/Au:S/C:P/I:P/A:P

X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sprocdri3queryversion, (2) sprocdri3open, (3) sprocdri3pixmapfrombuffer, (4) sprocdri3bufferfrompixmap, (5) sprocdri3fencefromfd, (6) sprocdri3fdfromfence, (7) procpresentquerycapabilities, (8) sprocpresentqueryversion, (9) sprocpresentpixmap, (10) sprocpresentnotifymsc, (11) sprocpresentselectinput, or (12) sprocpresentquerycapabilities function in the (a) DRI3 or (b) Present extension.

First published (updated )
CVE-2014-8103

X.Org X11Integer Overflow

Risk 46
Severity
6.5
Integer Overflow
AV:N/AC:L/Au:S/C:P/I:P/A:P

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) glXDispReadPixels, (2) glXDispSwapReadPixels, (3) glXDispGetTexImage, (4) glXDispSwapGetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) glXGetAnswerBuffer, (11) GLXGETANSWERBUFFER, (12) glXMap1dReqSize, (13) glXMap1fReqSize, (14) Map2Size, (15) glXMap2dReqSize, (16) glXMap2fReqSize, (17) glXImageSize, or (18) glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.

First published (updated )
CVE-2014-8093

X.Org xorg-serverNull Pointer Dereference

Risk 22
Severity
4.3
Null Pointer Dereference
AV:N/AC:M/Au:N/C:N/I:N/A:P

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a crafted connection request.

First published (updated )
CVE-2014-8091

openSUSE openSUSEThe authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authen…

Risk 25
Severity
3.6
AV:L/AC:L/Au:N/C:P/I:P/A:N

The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.

First published (updated )
CVE-2015-3164

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203