Xorg Server

xorg-server

Vendor: X.org • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-3164 2Opensuse X.org 3Opensuse X ServerXorg Server May 6, 2026 Jul 1, 2015 N/A· v4 N/A· v3 3.6 LOW· v2 The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving...Show more The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.Show less
CVE-2007-4730 1X.org 1Xorg Server Apr 23, 2026 Sep 11, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap int...Show more Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.Show less
CVE-2006-4447 1X.org 9Emu Linux X87 Xlibs X11r6X11r7+6 more Apr 16, 2026 Aug 30, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain...Show more X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.Show less