Debian Xorg-Server vulnerabilities

CVE-2006-6102 [CRITICAL] CVE-2006-6102: xorg-server - Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X... Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures. Scope: local bookworm: resolved (fixed in 2:1.1.1-15) bullseye: res

CVE-2021-3472 [HIGH] CVE-2021-3472: xorg-server - A flaw was found in xorg-x11-server in versions before 1.20.11. An integer under... A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Scope: local bookworm: resolved (fixed in 2:1.20.11-1) bullseye: resolved (fixed in 2:1.20.11-1)

CVE-2007-5760 [CRITICAL] CVE-2007-5760: xorg-server - Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 al... Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index. Scope: local bookworm: resolved (fixed in 2:1.4.1~git20080105-2) bullseye: resolved (fixed in 2:1.4.1~git20080105-2) forky: resolved (fixed in 2:1.4.1~git20080105-2)

CVE-2021-4009 [HIGH] CVE-2021-4009: xorg-server - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14... A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Scope: local bookworm: resolved (fixed in 2:1.20.13-3) bullseye: resolved (fixed in 2

CVE-2021-4010 [HIGH] CVE-2021-4010: xorg-server - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14... A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Scope: local bookworm: resolved (fixed in 2:1.20.13-3) bullseye: resolved (fixed in 2:1.20.11

CVE-2023-5367 [HIGH] CVE-2023-5367: xorg-server - A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs d... A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service. Scope: loc

CVE-2021-4008 [HIGH] CVE-2021-4008: xorg-server - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14... A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Scope: local bookworm: resolved (fixed in 2:1.20.13-3) bullseye: resolved (fixed in 2:1.20

CVE-2021-4011 [HIGH] CVE-2021-4011: xorg-server - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14... A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Scope: local bookworm: resolved (fixed in 2:1.20.13-3) bullseye: resolved (fixed in 2:1.20.11-1+de

CVE-2022-2319 [HIGH] CVE-2022-2319: xorg-server - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur... A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request length. Scope: local bookworm: resolved (fixed in 2:21.1.4-1) bullseye: resolved (fixed in 2:1.20.11-1+deb11u2) forky: resolved (fixed in 2:21.1.4-1) sid: resolved (fixed in 2:21.1.4-1) trixie: resolved (fixe

CVE-2025-26597 [HIGH] CVE-2025-26597: xorg-server - A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey()... A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size. Scope: local bookworm: reso

CVE-2025-26596 [HIGH] CVE-2025-26596: xorg-server - A heap overflow flaw was found in X.Org and Xwayland. The computation of the len... A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow. Scope: local bookworm: resolved (fixed in 2:21.1.7-3+deb12u9) bullseye: resolved (fixed in 2:1.20.11-1+deb11u15) forky: resolved (fixed in 2:21.1.16-1) sid: reso

CVE-2022-49737 [HIGH] CVE-2022-49737: xorg-server - In X.Org X server 20.11 through 21.1.16, when a client application uses easystro... In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock. Scope: local bookworm: open bullseye: open forky: resolved (fi

CVE-2025-62231 [HIGH] CVE-2025-62231: xorg-server - A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where i... A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash. Scope: local bookworm: resolved (fixed in 2:21.1.7-3+deb12u1

CVE-2007-1003 [CRITICAL] CVE-2007-1003: xorg-server - Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the X... Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption. Scope: local bookworm: resolved (fixed in 2:1.1.1-21) bullseye:

CVE-2020-14346 [HIGH] CVE-2020-14346: xorg-server - A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X... A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Scope: local bookworm: resolved (fixed in 2:1.20.9-1) bullseye: reso

CVE-2020-14345 [HIGH] CVE-2020-14345: xorg-server - A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds... A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Scope: local bookworm: resolved (fixed in 2:1.20.9-1) bullseye: resolved (fixed in 2:1

CVE-2020-14360 [HIGH] CVE-2020-14360: xorg-server - A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds ac... A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Scope: local bookworm: resolved (fixed in 2:1.20.10-1) bullseye: resolved (fixed in 2:1

CVE-2025-26594 [HIGH] CVE-2025-26594: xorg-server - A use-after-free flaw was found in X.Org and Xwayland. The root cursor is refere... A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free. Scope: local bookworm: resolved (fixed in 2:21.1.7-3+deb12u9) bullseye: resolved (fixed in 2:1.20.11-1+deb11u15) forky: resolved (f

CVE-2025-26600 [HIGH] CVE-2025-26600: xorg-server - A use-after-free flaw was found in X.Org and Xwayland. When a device is removed ... A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free. Scope: local bookworm: resolved (fixed in 2:21.1.7-3+deb12u9) bullseye: resolved (fixed in 2:1.20.11-1+deb11u15) forky: resolved (fixed in 2:21.1.

CVE-2008-2360 [CRITICAL] CVE-2008-2360: xorg-server - Integer overflow in the AllocateGlyph function in the Render extension in the X ... Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow. Scope: local bookworm: resolved (fixed in 2:1.4.1~git20080517-2) bulls