xorg-x11-server

22 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-3108321.1.12Xorg-x11-server: use-after-free in procrenderaddglyphsHIGH 7.81.9 %
CVE-2023-0494xorg-server 21.1.7A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSeHIGH 7.80.9 %
CVE-2022-46344xorg-x11-server-1.20.4A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation iHIGH 8.82.9 %
CVE-2022-46343xorg-x11-server-1.20.4A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memoHIGH 8.82.6 %
CVE-2022-46342xorg-x11-server-1.20.4A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory HIGH 8.81.4 %
CVE-2022-46341xorg-x11-server-1.20.4A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memHIGH 8.82.7 %
CVE-2022-46340xorg-x11-server-1.20.4A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extensionHIGH 8.82.7 %
CVE-2022-4283xorg-x11-server-1.20.4A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resHIGH 7.81.1 %
CVE-2022-2320xorg-x11-server 21.1A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results frHIGH 7.80.6 %
CVE-2022-2319xorg-x11-server 21.1A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validatiHIGH 7.80.5 %
CVE-2021-4011xorg-x11-server 21.1.2, xorg-x11-server 1.20.14A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegisteHIGH 7.80.6 %
CVE-2021-4010xorg-x11-server 21.1.2, xorg-x11-server 1.20.14A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSHIGH 7.80.6 %
CVE-2021-4009xorg-x11-server 21.1.2, xorg-x11-server 1.20.14A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreateHIGH 7.80.6 %
CVE-2021-4008xorg-x11-server 21.1.2, xorg-x11-server 1.20.14A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderComposHIGH 7.80.6 %
CVE-2020-25697AllA privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker tHIGH 7.00.3 %
CVE-2021-3472xorg-x11-server 1.20.11A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilegHIGH 7.81.1 %
CVE-2020-14360xorg-x11-server 1.20.10A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalHIGH 7.80.4 %
CVE-2020-25712xorg-x11-server 1.20.10A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerabilHIGH 7.80.4 %
CVE-2020-14345before xorg-x11-server 1.20.9A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escaHIGH 7.80.6 %
CVE-2020-14362before xorg-x11-server 1.20.9A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilegeHIGH 7.80.6 %
CVE-2020-14361before xorg-x11-server 1.20.9A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilegeHIGH 7.80.6 %
CVE-2020-14346before xorg-x11-server 1.20.9A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead HIGH 7.80.6 %