https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:12:45 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:2037 <p><strong>Affected:</strong> AlmaLinux:8: tigervnc, AlmaLinux:8: tigervnc-icons, AlmaLinux:8: tigervnc-license, AlmaLinux:8: tigervnc-selinux, AlmaLinux:8: tigervnc-server, AlmaLinux:8: tigervnc-server-minimal, AlmaLinux:8: tigervnc-server-module</p> <p>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.</p> <p>Security Fix(es):</p> <p>* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: tigervnc, AlmaLinux:8: tigervnc-icons, AlmaLinux:8: tigervnc-license, AlmaLinux:8: tigervnc-selinux, AlmaLinux:8: tigervnc-server, AlmaLinux:8: tigervnc-server-minimal, AlmaLinux:8: tigervnc-server-module</p> <p>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.</p> <p>Security Fix(es):</p> <p>* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:2037 https://cve.radiocsirt.org/vuln/bdu:2024-03132 bdu:2024-03132 https://cve.radiocsirt.org/vuln/bdu:2024-03132 https://cve.radiocsirt.org/vuln/bell-cve-2024-31080 <p><strong>Affected:</strong> Alpaquita:23: xorg-server, Alpaquita:stream: xorg-server</p> <p><strong>Affected:</strong> Alpaquita:23: xorg-server, Alpaquita:stream: xorg-server</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-31080 https://cve.radiocsirt.org/vuln/euvd-2026-261410 EUVD-2026-261410 https://cve.radiocsirt.org/vuln/euvd-2026-261410 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31080 <p>A heap-based buffer over-read vulnerability was found in the X.org server&#39;s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&#39;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.</p> <p>A heap-based buffer over-read vulnerability was found in the X.org server&#39;s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&#39;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-31080 https://cve.radiocsirt.org/vuln/ghsa-mqqf-4p7r-rf89 <p>A heap-based buffer over-read vulnerability was found in the X.org server&#39;s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&#39;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.</p> <p>A heap-based buffer over-read vulnerability was found in the X.org server&#39;s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&#39;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.</p> https://cve.radiocsirt.org/vuln/ghsa-mqqf-4p7r-rf89 https://cve.radiocsirt.org/vuln/gsd-2024-31080 gsd-2024-31080 https://cve.radiocsirt.org/vuln/gsd-2024-31080 https://cve.radiocsirt.org/vuln/msrc_cve-2024-31080 msrc_CVE-2024-31080 https://cve.radiocsirt.org/vuln/msrc_cve-2024-31080 https://cve.radiocsirt.org/vuln/oesa-2024-1416 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server, openEuler:22.03-LTS: xorg-x11-server, openEuler:22.03-LTS-SP1: xorg-x11-server, openEuler:22.03-LTS-SP2: xorg-x11-server, openEuler:22.03-LTS-SP3: xorg-x11-server</p> <p>X.Org X11 X server Security Fix(es): A heap-based buffer over-read vulnerability was found in the X.org server&amp;apos;s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&amp;apos;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.(CVE-2024-31080) A heap-based buffer over-read vulnerability was found in the X.org server&amp;apos;s ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&amp;apos;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significan…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server, openEuler:22.03-LTS: xorg-x11-server, openEuler:22.03-LTS-SP1: xorg-x11-server, openEuler:22.03-LTS-SP2: xorg-x11-server, openEuler:22.03-LTS-SP3: xorg-x11-server</p> <p>X.Org X11 X server Security Fix(es): A heap-based buffer over-read vulnerability was found in the X.org server&amp;apos;s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&amp;apos;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.(CVE-2024-31080) A heap-based buffer over-read vulnerability was found in the X.org server&amp;apos;s ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&amp;apos;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significan…</p> https://cve.radiocsirt.org/vuln/oesa-2024-1416 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13828-1 <p>xorg-x11-server-21.1.12-1.1 on GA media</p> <p>xorg-x11-server-21.1.12-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13828-1 https://cve.radiocsirt.org/vuln/rhsa-2024:2036 <p>xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice xorg-x11-server: Use-after-free in ProcRenderAddGlyphs</p> <p>xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice xorg-x11-server: Use-after-free in ProcRenderAddGlyphs</p> https://cve.radiocsirt.org/vuln/rhsa-2024:2036 https://cve.radiocsirt.org/vuln/suse-su-2024:1199-1 <p>Security update for xorg-x11-server</p> <p>Security update for xorg-x11-server</p> https://cve.radiocsirt.org/vuln/suse-su-2024:1199-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-31080 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server</p> <p>A heap-based buffer over-read vulnerability was found in the X.org server&#39;s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&#39;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server</p> <p>A heap-based buffer over-read vulnerability was found in the X.org server&#39;s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker&#39;s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-31080 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0778 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im X.Org X Server und in Xming ausnutzen, um vertrauliche Informationen offenzulegen und potenziell einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im X.Org X Server und in Xming ausnutzen, um vertrauliche Informationen offenzulegen und potenziell einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0778