Debian Xorg-Server vulnerabilities

CVE-2014-8099 [MEDIUM] CVE-2014-8099: xorg-server - The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R... The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdap

CVE-2025-49176 [HIGH] CVE-2025-49176: xorg-server - A flaw was found in the Big Requests extension. The request length is multiplied... A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check. Scope: local bookworm: resolved (fixed in 2:21.1.7-3+deb12u10) bullseye: resolved (fixed in 2:1.20.11-1+deb11u16) forky: resolved (fixed in 2:21.1.16-1.3) sid

CVE-2014-8102 [MEDIUM] CVE-2014-8102: xorg-server - The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X ... The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length value. Scope: local bookworm: resol

CVE-2014-8093 [MEDIUM] CVE-2014-8093: xorg-server - Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window S... Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3)

CVE-2014-8092 [MEDIUM] CVE-2014-8092: xorg-server - Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.O... Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) ProcPutImage, (2) GetHosts, (3) RegionSizeof, or (4) REQUEST_FIXED_SIZE function, which trig

CVE-2017-10972 [MEDIUM] CVE-2017-10972: xorg-server - Uninitialized data in endianness conversion in the XEvent handling of the X.Org ... Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server. Scope: local bookworm: resolved (fixed in 2:1.19.3-2) bullseye: resolved (fixed in 2:1.19.3-2) forky: resolved (fixed in 2:1.19.3-2) sid: resolved (fixed in 2:1

CVE-2014-8096 [MEDIUM] CVE-2014-8096: xorg-server - The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window Sy... The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value. Scope: local bookworm: resolve

CVE-2014-8097 [MEDIUM] CVE-2014-8097: xorg-server - The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Serv... The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) ProcDbeSwapBuffers or (2) SProcDbeSwapBuffers function. Scope:

CVE-2014-8101 [MEDIUM] CVE-2014-8101: xorg-server - The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6... The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcRRQueryVersion, (2) SProcRRGetScreenInf

CVE-2017-13723 [HIGH] CVE-2017-13723: xorg-server - In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker au... In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp. Scope: local bookworm: resolved (fixed in 2:1.19.4-1) bullseye: resolved (fixed

CVE-2014-8103 [MEDIUM] CVE-2014-8103: xorg-server - X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 a... X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_p

CVE-2015-3418 [HIGH] CVE-2015-3418: xorg-server - The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xor... The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xorg-server) before 1.16.4 allows attackers to cause a denial of service (divide-by-zero and crash) via a zero-height PutImage request. Scope: local bookworm: resolved (fixed in 2:1.16.4-1) bullseye: resolved (fixed in 2:1.16.4-1) forky: resolved (fixed in 2:1.16.4-1) sid: resolved (fixed

CVE-2014-8094 [MEDIUM] CVE-2014-8094: xorg-server - Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.O... Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write. Scope: local bookworm: resolved (

CVE-2013-4396 [MEDIUM] CVE-2013-4396: xorg-server - Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in th... Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure. Scope: local bookworm: resolved (fixed in 2:1.14.3

CVE-2011-4029 [LOW] CVE-2011-4029: xorg-server - The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows loca... The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file. Scope: local bookworm: resolved (fixed in 2:1.11.1.901-2) bullseye: resolved (fixed in 2:1.

CVE-2022-3551 [LOW] CVE-2022-3551: xorg-server - A vulnerability, which was classified as problematic, has been found in X.org Se... A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211052. Scope: local bookworm: resolved (fixed in 2:21.1.4-3)

CVE-2022-3553 [LOW] CVE-2022-3553: xorg-server - A vulnerability, which was classified as problematic, was found in X.org Server.... A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m of the component xquartz. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier VDB-211053 was assigned to this vulnerability. Scope: local bookworm: resolved

CVE-2025-49177 [MEDIUM] CVE-2025-49177: xorg-server - A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode hand... A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests. Scope: local bookworm: resolved (fixed in 2:21.1.7-3+deb12u10) bullseye: resolved forky: resolved (fixed in 2:21.1.16-1.2) sid: resolved (fixed in 2:21.1.16-1.2) trixie: re

CVE-2015-0255 [MEDIUM] CVE-2015-0255: xorg-server - X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.... X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request. Scope: local bookworm: resolved (fixed in 2:1.16.4-1) bullseye: resolved (fixed in 2:1.16.4-1) forky: reso

CVE-2017-2624 [MEDIUM] CVE-2017-2624: xorg-server - It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check... It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could all