from 0, < 2:1.20.11-1+deb11u11
from 0, < 2:1.20.4-1+deb10u13
from 0, < 2:1.20.11-1+deb11u11
CRITICAL9.8xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or p…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or p…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to cr…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X se…
from 0, < 2:1.19.5-1
CRITICAL9.8xorg-server - security update
from 0, < 2:1.16.4-1+deb8u2
CRITICAL9.8xorg-server - security update
from 0, < 2:1.12.4-6+deb7u8
CRITICAL9.8xorg-server - security update
from 0, < 2:1.19.5-1
CRITICAL9.1A flaw was found in the X.Org X server.
from 0
CRITICAL9.1A flaw was found in the X.Org X server.
from 0
HIGH8.8A vulnerability was found in X.Org.
from 0, < 2:1.20.11-1+deb11u4
HIGH8.8A vulnerability was found in X.Org.
from 0, < 2:1.20.11-1+deb11u4
HIGH8.8A vulnerability was found in X.Org.
from 0, < 2:1.20.11-1+deb11u4
HIGH8.8A vulnerability was found in X.Org.
from 0, < 2:1.20.11-1+deb11u4
HIGH8.8A vulnerability was found in X.Org.
from 0, < 2:1.20.11-1+deb11u4
HIGH8.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u3
HIGH8.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u6
HIGH8.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u3
HIGH8.8xorg-server - security update
from 0, < 2:1.16.4-1+deb8u1
HIGH8.8xorg-server - security update
from 0, < 2:1.19.3-2
HIGH8.8xorg-server - security update
from 0, < 2:1.12.4-6+deb7u7
HIGH7.8A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter().
from 0
HIGH7.8A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter().
from 0
HIGH7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
from 0
HIGH7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
from 0
HIGH7.8A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence().
from 0
HIGH7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
from 0
HIGH7.8An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat.
from 0
HIGH7.8A flaw was found in the X.Org X server's XKB key types request validation.
from 0
HIGH7.8A flaw was found in the X.Org X server.
from 0
HIGH7.8A flaw was found in the X.Org X server.
from 0
HIGH7.8A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input.
from 0, < 2:1.20.11-1+deb11u16
HIGH7.8A use-after-free flaw was found in X.Org and Xwayland.
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8A use-after-free flaw was found in X.Org and Xwayland.
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8An access to an uninitialized pointer flaw was found in X.Org and Xwayland.
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8An out-of-bounds write flaw was found in X.Org and Xwayland.
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8A buffer overflow flaw was found in X.Org and Xwayland.
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8A heap overflow flaw was found in X.Org and Xwayland.
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8A buffer overflow flaw was found in X.Org and Xwayland.
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8xorg-server - security update
from 0, < 2:21.1.7-3+deb12u9
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u15
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u14
HIGH7.8xorg-server - security update
from 0, < 2:21.1.7-3+deb12u8
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u14
HIGH7.8A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers.
from 0, < 2:1.20.11-1+deb11u13
HIGH7.8A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server.
from 0, < 2:1.20.11-1+deb11u11
HIGH7.8A flaw was found in X.Org server.
from 0, < 2:1.20.11-1+deb11u11
HIGH7.8An out-of-bounds memory access flaw was found in the X.Org server.
from 0, < 2:1.20.11-1+deb11u11
HIGH7.8A flaw was found in the X.Org server.
from 0, < 2:1.20.11-1+deb11u11
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u12
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u11
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u10
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u9
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u10
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u8
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u8
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u10
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u9
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u6
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u6
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u5
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u8
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u5
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u4
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u7
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u4
HIGH7.8A flaw was found in the Xorg-x11-server.
from 0, < 2:1.20.11-1+deb11u2
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u2
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u5
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u2
HIGH7.8A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14.
from 0, < 2:1.20.11-1+deb11u1
HIGH7.8A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14.
from 0, < 2:1.20.11-1+deb11u1
HIGH7.8A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14.
from 0, < 2:1.20.11-1+deb11u1
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u4
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1+deb11u1
HIGH7.8xorg-server - security update
from 0, < 2:1.19.2-1+deb9u9
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u3
HIGH7.8xorg-server - security update
from 0, < 2:1.20.11-1
HIGH7.8xorg-server - security update
from 0, < 2:1.19.2-1+deb9u8
HIGH7.8xorg-server - security update
from 0, < 2:1.19.2-1+deb9u7
HIGH7.8xorg-server - security update
from 0, < 2:1.20.10-1
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u2
HIGH7.8A flaw was found in xorg-x11-server before 1.20.10.
from 0, < 2:1.20.10-1
HIGH7.8A flaw was found in X.Org Server before xorg-x11-server 1.20.9.
from 0, < 2:1.20.9-1
HIGH7.8A flaw was found in X.Org Server before xorg-x11-server 1.20.9.
from 0, < 2:1.20.9-1
HIGH7.8A flaw was found in xorg-x11-server before 1.20.9.
from 0, < 2:1.20.9-1
HIGH7.8xorg-server - security update
from 0, < 2:1.20.4-1+deb10u1
HIGH7.8xorg-server - security update
from 0, < 2:1.20.9-1
HIGH7.8xorg-server - security update
from 0, < 2:1.19.2-1+deb9u6
HIGH7.8In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer,…
from 0, < 2:1.19.4-1
HIGH7.7In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various dat…
from 0
HIGH7.5A flaw was found in xorg-server.
from 0, < 2:1.20.11-1+deb11u9
HIGH7.5xorg-server - regression update
from 0, < 2:1.16.4-1
HIGH7.5xorg-server - regression update
from 0, < 2:1.7.7-18+deb6u3
HIGH7.3A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.
from 0, < 2:1.20.11-1+deb11u17
HIGH7.3xorg-server - security update
from 0, < 2:1.20.11-1+deb11u17
HIGH7.3xorg-server - security update
from 0, < 2:1.20.11-1+deb11u17
HIGH7.3xorg-server - security update
from 0, < 2:21.1.7-3+deb12u11
HIGH7.3A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function c…
from 0, < 2:1.20.11-1+deb11u17
HIGH7.3A flaw was found in the X Record extension.
from 0, < 2:1.20.11-1+deb11u16
HIGH7.3A flaw was found in the Big Requests extension.
from 0, < 2:1.20.11-1+deb11u16
HIGH7.3A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function.
from 0, < 2:1.20.11-1+deb11u13
HIGH7.3A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function.
from 0, < 2:1.20.11-1+deb11u13
HIGH7.3xorg-server - security update
from 0, < 2:1.20.4-1+deb10u14
HIGH7.3xorg-server - security update
from 0, < 2:1.20.11-1+deb11u13
HIGH7.3xorg-server - security update
from 0, < 2:1.20.11-1+deb11u13
HIGH7.0A use-after-free flaw was found in xorg-x11-server-Xvfb.
from 0
HIGH7.0It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies.
from 0, < 2:1.19.2-1
MEDIUM6.6xorg-server - security update
from 0, < 2:1.19.2-1+deb9u4
MEDIUM6.6xorg-server - security update
from 0, < 2:1.20.3-1
MEDIUM6.5A vulnerability, which was classified as problematic, was found in X.org Server.
from 0
MEDIUM6.5A vulnerability, which was classified as problematic, has been found in X.org Server.
from 0, < 2:1.20.11-1+deb11u3
MEDIUM6.5Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious…
from 0, < 2:1.19.3-2
MEDIUM6.1A flaw was found in the XFIXES extension.
from 0, < 2:21.1.7-3+deb12u10
MEDIUM6.1xorg-server - security update
from 0, < 2:1.20.11-1+deb11u16
MEDIUM6.1xorg-server - security update
from 0, < 2:1.20.11-1+deb11u16
MEDIUM6.1xorg-server - security update
from 0, < 2:21.1.7-3+deb12u10
MEDIUM5.5A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow().
from 0
MEDIUM5.5An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes().
from 0
MEDIUM5.5A flaw was found in the X server's request handling.
from 0, < 2:1.20.11-1+deb11u16
MEDIUM5.5A flaw was found in the X.Org server.
from 0, < 2:1.20.11-1+deb11u11
MEDIUM5.5A flaw was found in the way xserver memory was not properly initialized.
from 0, < 2:1.20.9-1
MEDIUM4.7A use-after-free flaw was found in the xorg-x11-server.
from 0, < 2:1.20.11-1+deb11u8
MEDIUM4.7In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension en…
from 0, < 2:1.19.4-1
—The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users…
from 0, < 2:1.17.2-1
—xorg-server - security update
from 0, < 2:1.12.4-6+deb7u6
—xorg-server - security update
from 0, < 2:1.16.4-1
—xorg-server - security update
from 0, < 2:1.7.7-18+deb6u2
—X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of servi…
from 0, < 2:1.16.2.901-1
—The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (ak…
from 0, < 2:1.16.2.901-1
—The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1…
from 0, < 2:1.16.2.901-1
—The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before…
from 0, < 2:1.16.2.901-1
—The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before…
from 0, < 2:1.16.2.901-1
—The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.…
from 0, < 2:1.16.2.901-1
—The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remot…
from 0, < 2:1.16.2.901-1
—The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver a…
from 0, < 2:1.16.2.901-1
—The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remo…
from 0, < 2:1.16.2.901-1
—Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.…
from 0, < 2:1.16.2.901-1
—Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver…
from 0, < 2:1.16.2.901-1
—Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow…
from 0, < 2:1.16.2.901-1
—xorg-server - security update
from 0, < 2:1.16.2.901-1
—xorg-server - security update
from 0, < 2:1.7.7-18+deb6u1
—xorg-server - security update
from 0, < 2:1.12.4-6+deb7u5
—xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attac…
from 0, < 2:1.11.3.901-2
—xorg-server - integer underflow
from 0, < 2:1.14.2.901-1
—xorg-server - integer underflow
from 0, < 2:1.7.7-18
—xorg-server - use-after-free
from 0, < 2:1.14.3-4
—xorg-server - use-after-free
from 0, < 2:1.7.7-17
—xorg-server - information disclosure
from 0, < 2:1.7.7-16
—xorg-server - information disclosure
from 0, < 2:1.12.4-6
—The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read ar…
from 0, < 2:1.9.0.901-1
—The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute…
from 0, < 2:1.9.99.902-1
—The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444…
from 0, < 2:1.11.1.901-2
—The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a…
from 0, < 2:1.11.1.901-2
—Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service…
from 0, < 2:1.12.1.902-1
—xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command…
from 0, < 2:1.6.1.901-3
—Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-depende…
from 0, < 2:1.4.1~git20080517-2
—xorg-server - multiple vulnerabilities
from 0, < 2:1.1.1-21etch5
—Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attack…
from 0, < 2:1.4.1~git20080517-2
—Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attac…
from 0, < 2:1.4.1~git20080517-2
—Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitr…
from 0, < 2:1.4.1~git20080517-2
—xorg-server - multiple vulnerabilities
from 0, < 2:1.4.1~git20080517-2
—xorg-server - multiple vulnerabilities
from 0, < 2:1.4.1~git20080517-2~lenny1
—Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInf…
from 0, < 2:1.4.1~git20080105-2
—The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to re…
from 0, < 2:1.4.1~git20080105-2
—Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allo…
from 0, < 2:1.4.1~git20080105-2
—The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byt…
from 0, < 2:1.4.1~git20080105-2
—X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to th…
from 0, < 2:1.4.1~git20080105-2
—xorg-server - multiple vulnerabilities
from 0, < 2:1.4.1~git20080105-2
—xorg-server - multiple vulnerabilities
from 0, < 2:1.1.1-21etch3
—xorg-server - multiple vulnerabilities
from 0, < 2:1.3.0.0.dfsg-12lenny2
—gnome-screensaver - authentication bypass
from 0, < 2:1.4.1~git20080118-1
—xorg-server - buffer overflow
from 0, < 2:1.3.0.0.dfsg-12lenny1
—xorg-server - buffer overflow
from 0, < 2:1.4-1
—xorg-server - buffer overflow
from 0, < 2:1.1.1-21etch1
—The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated us…
from 0, < 2:1.3.0.0.dfsg-4
—xfree86
from 0, < 2:1.1.1-21
—xfree86
from 0, < 2:1.1.1-15
—Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows…
from 0, < 2:1.1.1-15
—Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allo…
from 0, < 2:1.1.1-15
—X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid…
from 0, < 1:1.0.2-9
—Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as…
from 0, < 1:1.0.2-8
—X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the…
from 0, < 1:1.0.2-1