https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:14:51 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03961 bdu:2025-03961 https://cve.radiocsirt.org/vuln/bdu:2025-03961 https://cve.radiocsirt.org/vuln/euvd-2026-223037 EUVD-2026-223037 https://cve.radiocsirt.org/vuln/euvd-2026-223037 https://cve.radiocsirt.org/vuln/fkie_cve-2022-49737 <p>In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.</p> <p>In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-49737 https://cve.radiocsirt.org/vuln/ghsa-3f26-j6r7-9q8v <p>In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.</p> <p>In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.</p> https://cve.radiocsirt.org/vuln/ghsa-3f26-j6r7-9q8v https://cve.radiocsirt.org/vuln/oesa-2026-1380 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: xorg-x11-server, openEuler:24.03-LTS-SP3: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server, openEuler:22.03-LTS-SP4: xorg-x11-server, openEuler:24.03-LTS: xorg-x11-server, openEuler:24.03-LTS-SP1: xorg-x11-server</p> <p>X.Org X11 X server Security Fix(es):</p> <p>In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.(CVE-2022-49737)</p> <p>A flaw was found in the X Rendering extension&amp;apos;s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.(CVE-2025-49175)</p> <p>A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.(CVE-2025-49176)</p> <p>A flaw was found in the X server&amp;apos;s request handling. Non-zero &amp;apos;bytes to ignore&amp;apos; in a client&amp;apos;s request can cause the server to skip processing another client&amp;apos;s request, potentially leading to a denial of service.(CVE-2025-49178)</p> <p>A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.(CVE-2025-49179)</p> <p>A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.(CVE-2…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: xorg-x11-server, openEuler:24.03-LTS-SP3: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server, openEuler:22.03-LTS-SP4: xorg-x11-server, openEuler:24.03-LTS: xorg-x11-server, openEuler:24.03-LTS-SP1: xorg-x11-server</p> <p>X.Org X11 X server Security Fix(es):</p> <p>In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.(CVE-2022-49737)</p> <p>A flaw was found in the X Rendering extension&amp;apos;s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.(CVE-2025-49175)</p> <p>A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.(CVE-2025-49176)</p> <p>A flaw was found in the X server&amp;apos;s request handling. Non-zero &amp;apos;bytes to ignore&amp;apos; in a client&amp;apos;s request can cause the server to skip processing another client&amp;apos;s request, potentially leading to a denial of service.(CVE-2025-49178)</p> <p>A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.(CVE-2025-49179)</p> <p>A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.(CVE-2…</p> https://cve.radiocsirt.org/vuln/oesa-2026-1380 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14916-1 <p>xorg-x11-server-21.1.15-3.1 on GA media</p> <p>xorg-x11-server-21.1.15-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14916-1 https://cve.radiocsirt.org/vuln/suse-su-2025:0984-1 <p>Security update for xorg-x11-server</p> <p>Security update for xorg-x11-server</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0984-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-49737 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:Pro:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 4 more</p> <p>In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:Pro:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 4 more</p> <p>In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-49737 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0572 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in X.Org X11 ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in X.Org X11 ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0572