X vulnerabilities
55 vulnerabilities
Known vulnerabilities in X products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 28 products.
Products
28- Libxfont13 vulnerabilities
- X115 vulnerabilities
- Libx113 vulnerabilities
- Libxcursor3 vulnerabilities
- X.Org X113 vulnerabilities
- Libxt2 vulnerabilities
- Libxtst2 vulnerabilities
- Libxv2 vulnerabilities
- Libxvmc2 vulnerabilities
- Libxxf86Dga2 vulnerabilities
- X.Org Xserver2 vulnerabilities
- Libchromexvmc1 vulnerabilities
- Libchromexvmcpro1 vulnerabilities
- Libdmx1 vulnerabilities
- Libfs1 vulnerabilities
- Libglx1 vulnerabilities
- Libxcb1 vulnerabilities
- Libxext1 vulnerabilities
- Libxfixes1 vulnerabilities
- Libxinerama1 vulnerabilities
- Libxp1 vulnerabilities
- Libxrandr1 vulnerabilities
- Libxrender1 vulnerabilities
- Libxres1 vulnerabilities
- Libxxf86Vm1 vulnerabilities
- X Display Manager1 vulnerabilities
- Xf86 Video Intel1 vulnerabilities
- X.Org1 vulnerabilities
CVE-2013-2063debianlibxtst+2
EPSS score1.39%
Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XRecordGetContext function.CVE-2013-2002debianlibxt+1EPSS score3.08%
Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.CVE-2013-2000debianlibxxf86dga+1EPSS score2.11%
Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.CVE-2013-2003debianlibxcursor+1EPSS score2.13%
Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.CVE-2013-2005debianlibxt+1EPSS score2.08%
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.CVE-2013-2066debianlibxv+2EPSS score2.33%
Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.CVE-2013-2004debianlibx11+1EPSS score1.58%
The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.CVE-2013-2179opensusexdm&distro=openSUSE Tumbleweed+1EPSS score2.44%
X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by attempting to log into an account whose password field contains invalid characters, as demonstrated using the crypt function from glibc 2.17 and later with (1) the "!" character in the salt portion of a password field or (2) a password that has been encrypted using DES or MD5 in FIPS-140 mode.CVE-2013-2001debianlibxxf86vm+2EPSS score2.71%
Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function.CVE-2013-2064canonicalubuntu_linux+7EPSS score2.45%
Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.CVE-2013-2062debianlibxp+2EPSS score1.67%
Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XpGetAttributes, (2) XpGetOneAttribute, (3) XpGetPrinterList, and (4) XpQueryScreens functions.CVE-2013-1989debianlibxv+1EPSS score1.83%
Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvQueryPortAttributes, (2) XvListImageFormats, and (3) XvCreateImage function.CVE-2013-1981canonicalubuntu_linux+2EPSS score1.40%
Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.CVE-2013-1990debianlibxvmc+1EPSS score1.40%
Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.CVE-2013-1988debianlibxres+1EPSS score1.97%
Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.CVE-2013-1940canonicalubuntu_linux+12EPSS score0.38%
X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.CVE-2013-1996debianlibfs+2EPSS score1.26%
X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.CVE-2013-1985debianlibxinerama+2EPSS score1.82%
Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XineramaQueryScreens function.CVE-2013-1986debianlibxrandr+1EPSS score1.82%
Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.CVE-2013-1982debianlibxext+2EPSS score1.69%
Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.