Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2007-6427 (GCVE-0-2007-6427)
Vulnerability from cvelistv5 – Published: 2008-01-18 22:00 – Updated: 2024-08-07 16:02
VLAI?
EPSS
Summary
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
68 references
Date Public ?
2008-01-17 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:02:37.073Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "oval:org.mitre.oval:def:10372",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372"
},
{
"name": "28542",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28542"
},
{
"name": "29139",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29139"
},
{
"name": "27336",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/27336"
},
{
"name": "ADV-2008-0184",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0184"
},
{
"name": "29622",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29622"
},
{
"name": "FEDORA-2008-0831",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html"
},
{
"name": "SUSE-SA:2008:003",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"name": "SUSE-SR:2008:008",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html"
},
{
"name": "28532",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28532"
},
{
"name": "29707",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29707"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm"
},
{
"name": "28843",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28843"
},
{
"name": "DSA-1466",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"name": "27351",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/27351"
},
{
"name": "28540",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28540"
},
{
"name": "SSRT080083",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"name": "20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/487335/100/0/threaded"
},
{
"name": "ADV-2008-0703",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0703"
},
{
"name": "MDVSA-2008:021",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:021"
},
{
"name": "ADV-2008-0924",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "28718",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28718"
},
{
"name": "200153",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT",
"x_transferred"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1"
},
{
"name": "RHSA-2008:0029",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
},
{
"name": "28584",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28584"
},
{
"name": "[4.1] 20080208 012: SECURITY FIX: February 8, 2008",
"tags": [
"vendor-advisory",
"x_refsource_OPENBSD",
"x_transferred"
],
"url": "http://www.openbsd.org/errata41.html#012_xorg"
},
{
"name": "28941",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28941"
},
{
"name": "28592",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28592"
},
{
"name": "HPSBUX02381",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"name": "29420",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29420"
},
{
"name": "MDVSA-2008:022",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:022"
},
{
"name": "APPLE-SA-2008-03-18",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "30161",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30161"
},
{
"name": "GLSA-200805-07",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml"
},
{
"name": "RHSA-2008:0030",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
},
{
"name": "28543",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28543"
},
{
"name": "28273",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28273"
},
{
"name": "RHSA-2008:0031",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0031.html"
},
{
"name": "28550",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28550"
},
{
"name": "ADV-2008-0497",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0497/references"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=204362"
},
{
"name": "MDVSA-2008:023",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:023"
},
{
"name": "28885",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28885"
},
{
"name": "103200",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT",
"x_transferred"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"name": "MDVSA-2008:025",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:025"
},
{
"name": "USN-571-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/571-1/"
},
{
"name": "GLSA-200804-05",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-200804-05.xml"
},
{
"name": "28535",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28535"
},
{
"name": "ADV-2008-3000",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/3000"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "20080117 Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE",
"x_transferred"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643"
},
{
"name": "[xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.freedesktop.org/archives/xorg/2008-January/031918.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities"
},
{
"name": "32545",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/32545"
},
{
"name": "xorg-xinput-code-execution(39759)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39759"
},
{
"name": "28838",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28838"
},
{
"name": "1019232",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1019232"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://issues.rpath.com/browse/RPL-2010"
},
{
"name": "[4.2] 20080208 006: SECURITY FIX: February 8, 2008",
"tags": [
"vendor-advisory",
"x_refsource_OPENBSD",
"x_transferred"
],
"url": "http://www.openbsd.org/errata42.html#006_xorg"
},
{
"name": "28539",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28539"
},
{
"name": "SUSE-SR:2008:003",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
},
{
"name": "28616",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28616"
},
{
"name": "FEDORA-2008-0760",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html"
},
{
"name": "28536",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28536"
},
{
"name": "28693",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28693"
},
{
"name": "GLSA-200801-09",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-200801-09.xml"
},
{
"name": "ADV-2008-0179",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0179"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-01-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "oval:org.mitre.oval:def:10372",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372"
},
{
"name": "28542",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28542"
},
{
"name": "29139",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29139"
},
{
"name": "27336",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/27336"
},
{
"name": "ADV-2008-0184",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0184"
},
{
"name": "29622",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29622"
},
{
"name": "FEDORA-2008-0831",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html"
},
{
"name": "SUSE-SA:2008:003",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"name": "SUSE-SR:2008:008",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html"
},
{
"name": "28532",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28532"
},
{
"name": "29707",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29707"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm"
},
{
"name": "28843",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28843"
},
{
"name": "DSA-1466",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"name": "27351",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/27351"
},
{
"name": "28540",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28540"
},
{
"name": "SSRT080083",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"name": "20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/487335/100/0/threaded"
},
{
"name": "ADV-2008-0703",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0703"
},
{
"name": "MDVSA-2008:021",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:021"
},
{
"name": "ADV-2008-0924",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "28718",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28718"
},
{
"name": "200153",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1"
},
{
"name": "RHSA-2008:0029",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
},
{
"name": "28584",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28584"
},
{
"name": "[4.1] 20080208 012: SECURITY FIX: February 8, 2008",
"tags": [
"vendor-advisory",
"x_refsource_OPENBSD"
],
"url": "http://www.openbsd.org/errata41.html#012_xorg"
},
{
"name": "28941",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28941"
},
{
"name": "28592",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28592"
},
{
"name": "HPSBUX02381",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"name": "29420",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29420"
},
{
"name": "MDVSA-2008:022",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:022"
},
{
"name": "APPLE-SA-2008-03-18",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "30161",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30161"
},
{
"name": "GLSA-200805-07",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml"
},
{
"name": "RHSA-2008:0030",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
},
{
"name": "28543",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28543"
},
{
"name": "28273",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28273"
},
{
"name": "RHSA-2008:0031",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0031.html"
},
{
"name": "28550",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28550"
},
{
"name": "ADV-2008-0497",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0497/references"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=204362"
},
{
"name": "MDVSA-2008:023",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:023"
},
{
"name": "28885",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28885"
},
{
"name": "103200",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"name": "MDVSA-2008:025",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:025"
},
{
"name": "USN-571-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/571-1/"
},
{
"name": "GLSA-200804-05",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-200804-05.xml"
},
{
"name": "28535",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28535"
},
{
"name": "ADV-2008-3000",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/3000"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "20080117 Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643"
},
{
"name": "[xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.freedesktop.org/archives/xorg/2008-January/031918.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities"
},
{
"name": "32545",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/32545"
},
{
"name": "xorg-xinput-code-execution(39759)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39759"
},
{
"name": "28838",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28838"
},
{
"name": "1019232",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1019232"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://issues.rpath.com/browse/RPL-2010"
},
{
"name": "[4.2] 20080208 006: SECURITY FIX: February 8, 2008",
"tags": [
"vendor-advisory",
"x_refsource_OPENBSD"
],
"url": "http://www.openbsd.org/errata42.html#006_xorg"
},
{
"name": "28539",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28539"
},
{
"name": "SUSE-SR:2008:003",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
},
{
"name": "28616",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28616"
},
{
"name": "FEDORA-2008-0760",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html"
},
{
"name": "28536",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28536"
},
{
"name": "28693",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28693"
},
{
"name": "GLSA-200801-09",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-200801-09.xml"
},
{
"name": "ADV-2008-0179",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0179"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6427",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "oval:org.mitre.oval:def:10372",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372"
},
{
"name": "28542",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28542"
},
{
"name": "29139",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29139"
},
{
"name": "27336",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/27336"
},
{
"name": "ADV-2008-0184",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0184"
},
{
"name": "29622",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29622"
},
{
"name": "FEDORA-2008-0831",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html"
},
{
"name": "SUSE-SA:2008:003",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"name": "SUSE-SR:2008:008",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html"
},
{
"name": "28532",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28532"
},
{
"name": "29707",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29707"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm"
},
{
"name": "28843",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28843"
},
{
"name": "DSA-1466",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"name": "27351",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/27351"
},
{
"name": "28540",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28540"
},
{
"name": "SSRT080083",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"name": "20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/487335/100/0/threaded"
},
{
"name": "ADV-2008-0703",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0703"
},
{
"name": "MDVSA-2008:021",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:021"
},
{
"name": "ADV-2008-0924",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "28718",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28718"
},
{
"name": "200153",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1"
},
{
"name": "RHSA-2008:0029",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
},
{
"name": "28584",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28584"
},
{
"name": "[4.1] 20080208 012: SECURITY FIX: February 8, 2008",
"refsource": "OPENBSD",
"url": "http://www.openbsd.org/errata41.html#012_xorg"
},
{
"name": "28941",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28941"
},
{
"name": "28592",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28592"
},
{
"name": "HPSBUX02381",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"name": "29420",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29420"
},
{
"name": "MDVSA-2008:022",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:022"
},
{
"name": "APPLE-SA-2008-03-18",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "30161",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30161"
},
{
"name": "GLSA-200805-07",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml"
},
{
"name": "RHSA-2008:0030",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
},
{
"name": "28543",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28543"
},
{
"name": "28273",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28273"
},
{
"name": "RHSA-2008:0031",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0031.html"
},
{
"name": "28550",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28550"
},
{
"name": "ADV-2008-0497",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0497/references"
},
{
"name": "http://bugs.gentoo.org/show_bug.cgi?id=204362",
"refsource": "CONFIRM",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=204362"
},
{
"name": "MDVSA-2008:023",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:023"
},
{
"name": "28885",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28885"
},
{
"name": "103200",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"name": "MDVSA-2008:025",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:025"
},
{
"name": "USN-571-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/571-1/"
},
{
"name": "GLSA-200804-05",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200804-05.xml"
},
{
"name": "28535",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28535"
},
{
"name": "ADV-2008-3000",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/3000"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=307562",
"refsource": "CONFIRM",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "20080117 Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities",
"refsource": "IDEFENSE",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643"
},
{
"name": "[xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server",
"refsource": "MLIST",
"url": "http://lists.freedesktop.org/archives/xorg/2008-January/031918.html"
},
{
"name": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities",
"refsource": "CONFIRM",
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities"
},
{
"name": "32545",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/32545"
},
{
"name": "xorg-xinput-code-execution(39759)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39759"
},
{
"name": "28838",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28838"
},
{
"name": "1019232",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1019232"
},
{
"name": "https://issues.rpath.com/browse/RPL-2010",
"refsource": "CONFIRM",
"url": "https://issues.rpath.com/browse/RPL-2010"
},
{
"name": "[4.2] 20080208 006: SECURITY FIX: February 8, 2008",
"refsource": "OPENBSD",
"url": "http://www.openbsd.org/errata42.html#006_xorg"
},
{
"name": "28539",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28539"
},
{
"name": "SUSE-SR:2008:003",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
},
{
"name": "28616",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28616"
},
{
"name": "FEDORA-2008-0760",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html"
},
{
"name": "28536",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28536"
},
{
"name": "28693",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28693"
},
{
"name": "GLSA-200801-09",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200801-09.xml"
},
{
"name": "ADV-2008-0179",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0179"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-6427",
"datePublished": "2008-01-18T22:00:00.000Z",
"dateReserved": "2007-12-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:02:37.073Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2007-6427",
"date": "2026-05-22",
"epss": "0.0424",
"percentile": "0.889"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.4.1\", \"matchCriteriaId\": \"F65D4017-F140-482C-ADC8-BEC8072B703E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"23E304C9-F780-4358-A58D-1E4C93977704\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6EBDAFF8-DE44-4E80-B6BD-E341F767F501\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"823BF8BE-2309-4F67-A5E2-EAD98F723468\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F92AB32-E7DE-43F4-B877-1F41FA162EC7\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.4.11\", \"matchCriteriaId\": \"A1E0F574-6859-45A6-B160-7DDE92C07CC7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.5.0\", \"versionEndExcluding\": \"10.5.2\", \"matchCriteriaId\": \"D139BCA7-8B43-4BDE-9AE9-5F41F4B6BD0D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E3EFD171-01F7-450B-B6F3-0F7E443A2337\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"24818450-FDA1-429A-AC17-68F44F584217\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C35B68DF-1440-4587-8458-9C5F4D1E43F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux:10.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A9BD0E68-2DC1-47EA-882A-6F5921A0F1BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"68B14008-5E0A-4187-AF93-DE2FF5BA5921\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C1B3637-1CDC-47FE-B19C-95FCEB833450\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C8FC5E32-C9E3-49F6-9481-1DB60DEE8A07\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA1E7EFF-1CCA-473B-8D5C-30D59C26DC70\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4CD2D897-E321-4CED-92E0-11A98B52053C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"29184B59-5756-48DB-930C-69D5CD628548\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"33EB57D5-DE8D-417C-8C00-AD331D61181C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:open_enterprise_server:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"012EA049-526D-44A7-9EFE-544D9EBE0D44\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.\"}, {\"lang\": \"es\", \"value\": \"La extensi\\u00f3n XInput de X.Org Xserver versiones anteriores a 1.4.1 permite a atacantes locales o remotos dependientes del contexto ejecutar c\\u00f3digo de su elecci\\u00f3n mediante peticiones relativas al intercambio de bytes y corrupci\\u00f3n de cabecera dentro d m\\u00faltiples funciones, vulnerabilidad distinta de CVE-2007-4990.\"}]",
"id": "CVE-2007-6427",
"lastModified": "2024-11-21T00:40:08.077",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:C/I:C/A:C\", \"baseScore\": 9.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.6, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": true, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2008-01-18T23:00:00.000",
"references": "[{\"url\": \"http://bugs.gentoo.org/show_bug.cgi?id=204362\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://docs.info.apple.com/article.html?artnum=307562\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28273\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28532\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28535\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28536\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28539\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28540\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28542\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28543\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28550\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28584\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28592\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28616\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28693\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28718\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28838\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28843\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28885\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28941\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29139\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29420\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29622\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29707\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/30161\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/32545\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200801-09.xml\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200804-05.xml\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://securitytracker.com/id?1019232\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2008/dsa-1466\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openbsd.org/errata41.html#012_xorg\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openbsd.org/errata42.html#006_xorg\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0029.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0030.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0031.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/487335/100/0/threaded\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/27336\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/27351\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0179\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0184\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0497/references\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0703\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0924/references\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/3000\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mitigation\", \"Third Party Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/39759\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://issues.rpath.com/browse/RPL-2010\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/571-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://bugs.gentoo.org/show_bug.cgi?id=204362\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://docs.info.apple.com/article.html?artnum=307562\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28273\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28532\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28535\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28536\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28539\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28540\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28542\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28543\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28550\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28584\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28592\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28616\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28693\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28718\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28838\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28843\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28885\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/28941\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29139\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29420\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29622\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29707\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/30161\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/32545\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200801-09.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200804-05.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://securitytracker.com/id?1019232\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2008/dsa-1466\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openbsd.org/errata41.html#012_xorg\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openbsd.org/errata42.html#006_xorg\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0029.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0030.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0031.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/487335/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/27336\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/27351\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0179\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0184\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0497/references\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0703\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/0924/references\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/3000\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mitigation\", \"Third Party Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/39759\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://issues.rpath.com/browse/RPL-2010\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/571-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2007-6427\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2008-01-18T23:00:00.000\",\"lastModified\":\"2026-04-23T00:35:47.467\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.\"},{\"lang\":\"es\",\"value\":\"La extensi\u00f3n XInput de X.Org Xserver versiones anteriores a 1.4.1 permite a atacantes locales o remotos dependientes del contexto ejecutar c\u00f3digo de su elecci\u00f3n mediante peticiones relativas al intercambio de bytes y corrupci\u00f3n de cabecera dentro d m\u00faltiples funciones, vulnerabilidad distinta de CVE-2007-4990.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":true,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.4.1\",\"matchCriteriaId\":\"F65D4017-F140-482C-ADC8-BEC8072B703E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23E304C9-F780-4358-A58D-1E4C93977704\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EBDAFF8-DE44-4E80-B6BD-E341F767F501\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"823BF8BE-2309-4F67-A5E2-EAD98F723468\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F92AB32-E7DE-43F4-B877-1F41FA162EC7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.4.11\",\"matchCriteriaId\":\"A1E0F574-6859-45A6-B160-7DDE92C07CC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.5.0\",\"versionEndExcluding\":\"10.5.2\",\"matchCriteriaId\":\"D139BCA7-8B43-4BDE-9AE9-5F41F4B6BD0D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3EFD171-01F7-450B-B6F3-0F7E443A2337\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24818450-FDA1-429A-AC17-68F44F584217\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C35B68DF-1440-4587-8458-9C5F4D1E43F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux:10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9BD0E68-2DC1-47EA-882A-6F5921A0F1BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68B14008-5E0A-4187-AF93-DE2FF5BA5921\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C1B3637-1CDC-47FE-B19C-95FCEB833450\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8FC5E32-C9E3-49F6-9481-1DB60DEE8A07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA1E7EFF-1CCA-473B-8D5C-30D59C26DC70\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4CD2D897-E321-4CED-92E0-11A98B52053C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"29184B59-5756-48DB-930C-69D5CD628548\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"33EB57D5-DE8D-417C-8C00-AD331D61181C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:open_enterprise_server:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"012EA049-526D-44A7-9EFE-544D9EBE0D44\"}]}]}],\"references\":[{\"url\":\"http://bugs.gentoo.org/show_bug.cgi?id=204362\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://docs.info.apple.com/article.html?artnum=307562\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28273\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28532\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28535\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28536\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28539\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28540\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28542\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28543\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28550\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28584\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28592\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28616\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28693\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28718\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28838\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28843\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28885\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28941\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29139\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29420\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29622\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29707\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/30161\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/32545\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200801-09.xml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200804-05.xml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://securitytracker.com/id?1019232\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2008/dsa-1466\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openbsd.org/errata41.html#012_xorg\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openbsd.org/errata42.html#006_xorg\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0029.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0030.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0031.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/487335/100/0/threaded\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/27336\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/27351\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0179\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0184\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0497/references\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0703\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0924/references\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/3000\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/39759\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://issues.rpath.com/browse/RPL-2010\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/571-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://bugs.gentoo.org/show_bug.cgi?id=204362\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://docs.info.apple.com/article.html?artnum=307562\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28273\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28532\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28535\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28536\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28539\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28540\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28542\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28543\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28550\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28584\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28592\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28616\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28693\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28718\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28838\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28843\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28885\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28941\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29139\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29420\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29622\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29707\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/30161\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/32545\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200801-09.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200804-05.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://securitytracker.com/id?1019232\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2008/dsa-1466\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openbsd.org/errata41.html#012_xorg\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openbsd.org/errata42.html#006_xorg\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0030.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0031.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/487335/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/27336\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/27351\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0179\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0184\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0497/references\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0703\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0924/references\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/3000\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/39759\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://issues.rpath.com/browse/RPL-2010\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/571-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
CERTA-2008-AVI-030
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités touchant le système X Windows, dues à la mauvaise validation de paramètres, ont été corrigées.
Description
Elles permettent entre autres d'exécuter du code arbitraire avec les droits du processus du serveur X. Pour mener à bien son attaque, l'utilisateur malveillant doit avoir accès à un shell local ou à une connexion deja établie avec le serveur X.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "X Windows System 11 (X11) 6.x ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "X Windows System 11 (X11) 7.x.",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nElles permettent entre autres d\u0027ex\u00e9cuter du code arbitraire avec les\ndroits du processus du serveur X. Pour mener \u00e0 bien son attaque,\nl\u0027utilisateur malveillant doit avoir acc\u00e8s \u00e0 un shell local ou \u00e0 une\nconnexion deja \u00e9tablie avec le serveur X.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2007-5760",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5760"
},
{
"name": "CVE-2007-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
},
{
"name": "CVE-2008-0006",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0006"
},
{
"name": "CVE-2007-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
},
{
"name": "CVE-2007-6428",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6428"
},
{
"name": "CVE-2007-5958",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5958"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1466 du 17 janvier 2008 :",
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iDefense 645 du 17 janvier 2008 :",
"url": "http://www.idefense.com/ntelligence/vulnerabilities/display.php?id=645"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2008:023 du 23 janvier 2008 :",
"url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:023"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200801-09 du 20 janvier 2008 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200801-09.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #103200 du 17 janvier 2008 :",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2008:025 du 23 janvier 2008 :",
"url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:025"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iDefense 643 du 17 janvier 2008 :",
"url": "http://www.idefense.com/ntelligence/vulnerabilities/display.php?id=643"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 HP-UX c01543321 du 3 novembre 2008:",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iDefense 646 du 17 janvier 2008 :",
"url": "http://www.idefense.com/ntelligence/vulnerabilities/display.php?id=646"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2008:0031 du 17 janvier 2008 :",
"url": "http://rhn.redhat.com/errata/RHSA-2008-0031.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Suse SUSE-SA:2008:003 du 17 janvier 2008 :",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-571-1 du 18 janvier 2008 :",
"url": "http://www.ubuntu.com/usn/usn-571-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-571-2 du 19 janvier 2008 :",
"url": "http://www.ubuntu.com/usn/usn-571-2"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2008:0064 du 17 janvier 2008 :",
"url": "http://rhn.redhat.com/errata/RHSA-2008-0064.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Avaya ASA-2008-039 du 28 janvier 2008 :",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2008:0030 du 17 janvier 2008 :",
"url": "http://rhn.redhat.com/errata/RHSA-2008-0030.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #103192 du 17 janvier 2008 :",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103192-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-571-1 du 17 janvier 2008 :",
"url": "http://www.ubuntulinux.org/usn/usn-571-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #103205 du 17 janvier 2008 :",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 SuSE SUSE-SA:2008:003 du 17 janvier 2008 :",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
}
],
"reference": "CERTA-2008-AVI-030",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-01-18T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Mandriva, Ubuntu, Debian, Gentoo, SuSE et Avaya.",
"revision_date": "2008-02-11T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 HP-UX.",
"revision_date": "2008-11-05T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s touchant le syst\u00e8me \u003cspan class=\"textit\"\u003eX\nWindows\u003c/span\u003e, dues \u00e0 la mauvaise validation de param\u00e8tres, ont \u00e9t\u00e9\ncorrig\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans X.Org",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 X.Org 031918 du 17 janvier 2008",
"url": null
}
]
}
CERTA-2008-AVI-148
Vulnerability from certfr_avis - Published: - Updated:None
Description
De multiples vulnérabilités ont été découvertes dans le système d'exploitation Apple Mac OS X. L'exploitation de ces vulnérabilités permet à un individu malveillant diverses actions dont exécuter du code arbitaire à distance, effectuer un déni de service, contourner la politique de sécurité, élever ses privilèges et effectuer une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité Apple 307562 pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple Mac Os X version 10.4.11 et ant\u00e9rieures ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Mac Os X version 10.5.2 et ant\u00e9rieures.",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le syst\u00e8me\nd\u0027exploitation Apple Mac OS X. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s\npermet \u00e0 un individu malveillant diverses actions dont ex\u00e9cuter du code\narbitaire \u00e0 distance, effectuer un d\u00e9ni de service, contourner la\npolitique de s\u00e9curit\u00e9, \u00e9lever ses privil\u00e8ges et effectuer une atteinte \u00e0\nla confidentialit\u00e9 des donn\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Apple 307562 pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
},
{
"name": "CVE-2008-0060",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0060"
},
{
"name": "CVE-2007-3847",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3847"
},
{
"name": "CVE-2007-6109",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6109"
},
{
"name": "CVE-2007-1661",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1661"
},
{
"name": "CVE-2008-0882",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0882"
},
{
"name": "CVE-2007-6336",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6336"
},
{
"name": "CVE-2007-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2799"
},
{
"name": "CVE-2006-3747",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3747"
},
{
"name": "CVE-2007-5000",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
},
{
"name": "CVE-2008-1089",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1089"
},
{
"name": "CVE-2008-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0005"
},
{
"name": "CVE-2007-4768",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4768"
},
{
"name": "CVE-2008-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0059"
},
{
"name": "CVE-2008-1000",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1000"
},
{
"name": "CVE-2007-1660",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1660"
},
{
"name": "CVE-2007-4568",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
},
{
"name": "CVE-2007-3378",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3378"
},
{
"name": "CVE-2008-0052",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0052"
},
{
"name": "CVE-2008-0990",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0990"
},
{
"name": "CVE-2008-0995",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0995"
},
{
"name": "CVE-2007-0898",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0898"
},
{
"name": "CVE-2007-5266",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5266"
},
{
"name": "CVE-2008-0055",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0055"
},
{
"name": "CVE-2007-1997",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1997"
},
{
"name": "CVE-2007-1659",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1659"
},
{
"name": "CVE-2007-6337",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6337"
},
{
"name": "CVE-2008-0044",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0044"
},
{
"name": "CVE-2008-0045",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0045"
},
{
"name": "CVE-2007-5971",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
},
{
"name": "CVE-2008-0046",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0046"
},
{
"name": "CVE-2008-0047",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0047"
},
{
"name": "CVE-2007-6335",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6335"
},
{
"name": "CVE-2007-5267",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5267"
},
{
"name": "CVE-2007-3725",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3725"
},
{
"name": "CVE-2008-0054",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0054"
},
{
"name": "CVE-2008-0996",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0996"
},
{
"name": "CVE-2007-5268",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5268"
},
{
"name": "CVE-2007-6203",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6203"
},
{
"name": "CVE-2008-0051",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0051"
},
{
"name": "CVE-2007-3799",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3799"
},
{
"name": "CVE-2008-0048",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0048"
},
{
"name": "CVE-2007-1662",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1662"
},
{
"name": "CVE-2006-3334",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3334"
},
{
"name": "CVE-2008-0998",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0998"
},
{
"name": "CVE-2007-0897",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0897"
},
{
"name": "CVE-2008-0318",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0318"
},
{
"name": "CVE-2007-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
},
{
"name": "CVE-2007-4510",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4510"
},
{
"name": "CVE-2007-5269",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5269"
},
{
"name": "CVE-2007-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5795"
},
{
"name": "CVE-2008-0006",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0006"
},
{
"name": "CVE-2008-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
},
{
"name": "CVE-2008-0728",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0728"
},
{
"name": "CVE-2007-2445",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2445"
},
{
"name": "CVE-2008-0049",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0049"
},
{
"name": "CVE-2007-1745",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1745"
},
{
"name": "CVE-2007-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
},
{
"name": "CVE-2008-0987",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0987"
},
{
"name": "CVE-2008-0993",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0993"
},
{
"name": "CVE-2008-0988",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0988"
},
{
"name": "CVE-2008-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0056"
},
{
"name": "CVE-2008-0992",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0992"
},
{
"name": "CVE-2006-5793",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5793"
},
{
"name": "CVE-2007-6428",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6428"
},
{
"name": "CVE-2008-0989",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0989"
},
{
"name": "CVE-2005-3352",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
},
{
"name": "CVE-2008-0053",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0053"
},
{
"name": "CVE-2007-4767",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4767"
},
{
"name": "CVE-2008-0050",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0050"
},
{
"name": "CVE-2007-5958",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5958"
},
{
"name": "CVE-2006-6481",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6481"
},
{
"name": "CVE-2008-0994",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0994"
},
{
"name": "CVE-2007-6421",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6421"
},
{
"name": "CVE-2008-0058",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0058"
},
{
"name": "CVE-2007-4752",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4752"
},
{
"name": "CVE-2008-0999",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0999"
},
{
"name": "CVE-2007-4560",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4560"
},
{
"name": "CVE-2007-4990",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
},
{
"name": "CVE-2007-4766",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4766"
},
{
"name": "CVE-2007-6388",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
},
{
"name": "CVE-2008-0596",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0596"
},
{
"name": "CVE-2007-4887",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4887"
}
],
"links": [],
"reference": "CERTA-2008-AVI-148",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-03-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": null,
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple 307562 du 18 mars 2008",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
}
]
}
CERTA-2011-AVI-702
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités dans AIX permettent à un utilisateur malveillant d'exécuter du code arbitraire ou de modifier des données.
Description
Plusieurs vulnérabilités affectent AIX :
- deux d'entre elles résident dans le serveur X et permettent à un utilisateur malveillant de corrompre la mémoire et d'exécuter du code arbitraire ;
- un autre problème permet à un utilisateur malveillant de détruire des fichiers vitaux du système ou d'utiliser des logiciels sur des fichiers non autorisés.
Solution
Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
AIX 5.x, 6.x et 7.x.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eAIX 5.x, 6.x et 7.x.\u003c/p\u003e",
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s affectent AIX\u00a0:\n\n- deux d\u0027entre elles r\u00e9sident dans le serveur X et permettent \u00e0 un\n utilisateur malveillant de corrompre la m\u00e9moire et d\u0027ex\u00e9cuter du\n code arbitraire\u00a0;\n- un autre probl\u00e8me permet \u00e0 un utilisateur malveillant de d\u00e9truire\n des fichiers vitaux du syst\u00e8me ou d\u0027utiliser des logiciels sur des\n fichiers non autoris\u00e9s.\n\n## Solution\n\nSe r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2007-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
},
{
"name": "CVE-2007-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
},
{
"name": "CVE-2011-1384",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1384"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 IBM AIX du 15 d\u00e9cembre 2011 :",
"url": "http://aix.software.ibm.com/aix/efixes/security/invscout_advisory2.asc"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 IBM AIX du 14 d\u00e9cembre 2011 :",
"url": "http://aix.software.ibm.com/aix/efixes/security/xorg_advisory.asc"
}
],
"reference": "CERTA-2011-AVI-702",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-12-16T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans AIX permettent \u00e0 un utilisateur\nmalveillant d\u0027ex\u00e9cuter du code arbitraire ou de modifier des donn\u00e9es.\n",
"title": "Vuln\u00e9rabilit\u00e9s dans AIX",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletins de s\u00e9curit\u00e9 IBM AIX des 14 et 15 d\u00e9cembre 2012",
"url": null
}
]
}
CERTA-2008-AVI-030
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités touchant le système X Windows, dues à la mauvaise validation de paramètres, ont été corrigées.
Description
Elles permettent entre autres d'exécuter du code arbitraire avec les droits du processus du serveur X. Pour mener à bien son attaque, l'utilisateur malveillant doit avoir accès à un shell local ou à une connexion deja établie avec le serveur X.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "X Windows System 11 (X11) 6.x ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "X Windows System 11 (X11) 7.x.",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nElles permettent entre autres d\u0027ex\u00e9cuter du code arbitraire avec les\ndroits du processus du serveur X. Pour mener \u00e0 bien son attaque,\nl\u0027utilisateur malveillant doit avoir acc\u00e8s \u00e0 un shell local ou \u00e0 une\nconnexion deja \u00e9tablie avec le serveur X.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2007-5760",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5760"
},
{
"name": "CVE-2007-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
},
{
"name": "CVE-2008-0006",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0006"
},
{
"name": "CVE-2007-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
},
{
"name": "CVE-2007-6428",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6428"
},
{
"name": "CVE-2007-5958",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5958"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1466 du 17 janvier 2008 :",
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iDefense 645 du 17 janvier 2008 :",
"url": "http://www.idefense.com/ntelligence/vulnerabilities/display.php?id=645"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2008:023 du 23 janvier 2008 :",
"url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:023"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200801-09 du 20 janvier 2008 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200801-09.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #103200 du 17 janvier 2008 :",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2008:025 du 23 janvier 2008 :",
"url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:025"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iDefense 643 du 17 janvier 2008 :",
"url": "http://www.idefense.com/ntelligence/vulnerabilities/display.php?id=643"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 HP-UX c01543321 du 3 novembre 2008:",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iDefense 646 du 17 janvier 2008 :",
"url": "http://www.idefense.com/ntelligence/vulnerabilities/display.php?id=646"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2008:0031 du 17 janvier 2008 :",
"url": "http://rhn.redhat.com/errata/RHSA-2008-0031.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Suse SUSE-SA:2008:003 du 17 janvier 2008 :",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-571-1 du 18 janvier 2008 :",
"url": "http://www.ubuntu.com/usn/usn-571-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-571-2 du 19 janvier 2008 :",
"url": "http://www.ubuntu.com/usn/usn-571-2"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2008:0064 du 17 janvier 2008 :",
"url": "http://rhn.redhat.com/errata/RHSA-2008-0064.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Avaya ASA-2008-039 du 28 janvier 2008 :",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2008:0030 du 17 janvier 2008 :",
"url": "http://rhn.redhat.com/errata/RHSA-2008-0030.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #103192 du 17 janvier 2008 :",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103192-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-571-1 du 17 janvier 2008 :",
"url": "http://www.ubuntulinux.org/usn/usn-571-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #103205 du 17 janvier 2008 :",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 SuSE SUSE-SA:2008:003 du 17 janvier 2008 :",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
}
],
"reference": "CERTA-2008-AVI-030",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-01-18T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Mandriva, Ubuntu, Debian, Gentoo, SuSE et Avaya.",
"revision_date": "2008-02-11T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 HP-UX.",
"revision_date": "2008-11-05T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s touchant le syst\u00e8me \u003cspan class=\"textit\"\u003eX\nWindows\u003c/span\u003e, dues \u00e0 la mauvaise validation de param\u00e8tres, ont \u00e9t\u00e9\ncorrig\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans X.Org",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 X.Org 031918 du 17 janvier 2008",
"url": null
}
]
}
CERTA-2008-AVI-148
Vulnerability from certfr_avis - Published: - Updated:None
Description
De multiples vulnérabilités ont été découvertes dans le système d'exploitation Apple Mac OS X. L'exploitation de ces vulnérabilités permet à un individu malveillant diverses actions dont exécuter du code arbitaire à distance, effectuer un déni de service, contourner la politique de sécurité, élever ses privilèges et effectuer une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité Apple 307562 pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple Mac Os X version 10.4.11 et ant\u00e9rieures ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Mac Os X version 10.5.2 et ant\u00e9rieures.",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le syst\u00e8me\nd\u0027exploitation Apple Mac OS X. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s\npermet \u00e0 un individu malveillant diverses actions dont ex\u00e9cuter du code\narbitaire \u00e0 distance, effectuer un d\u00e9ni de service, contourner la\npolitique de s\u00e9curit\u00e9, \u00e9lever ses privil\u00e8ges et effectuer une atteinte \u00e0\nla confidentialit\u00e9 des donn\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Apple 307562 pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
},
{
"name": "CVE-2008-0060",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0060"
},
{
"name": "CVE-2007-3847",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3847"
},
{
"name": "CVE-2007-6109",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6109"
},
{
"name": "CVE-2007-1661",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1661"
},
{
"name": "CVE-2008-0882",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0882"
},
{
"name": "CVE-2007-6336",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6336"
},
{
"name": "CVE-2007-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2799"
},
{
"name": "CVE-2006-3747",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3747"
},
{
"name": "CVE-2007-5000",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
},
{
"name": "CVE-2008-1089",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1089"
},
{
"name": "CVE-2008-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0005"
},
{
"name": "CVE-2007-4768",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4768"
},
{
"name": "CVE-2008-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0059"
},
{
"name": "CVE-2008-1000",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1000"
},
{
"name": "CVE-2007-1660",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1660"
},
{
"name": "CVE-2007-4568",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4568"
},
{
"name": "CVE-2007-3378",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3378"
},
{
"name": "CVE-2008-0052",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0052"
},
{
"name": "CVE-2008-0990",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0990"
},
{
"name": "CVE-2008-0995",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0995"
},
{
"name": "CVE-2007-0898",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0898"
},
{
"name": "CVE-2007-5266",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5266"
},
{
"name": "CVE-2008-0055",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0055"
},
{
"name": "CVE-2007-1997",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1997"
},
{
"name": "CVE-2007-1659",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1659"
},
{
"name": "CVE-2007-6337",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6337"
},
{
"name": "CVE-2008-0044",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0044"
},
{
"name": "CVE-2008-0045",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0045"
},
{
"name": "CVE-2007-5971",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
},
{
"name": "CVE-2008-0046",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0046"
},
{
"name": "CVE-2008-0047",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0047"
},
{
"name": "CVE-2007-6335",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6335"
},
{
"name": "CVE-2007-5267",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5267"
},
{
"name": "CVE-2007-3725",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3725"
},
{
"name": "CVE-2008-0054",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0054"
},
{
"name": "CVE-2008-0996",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0996"
},
{
"name": "CVE-2007-5268",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5268"
},
{
"name": "CVE-2007-6203",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6203"
},
{
"name": "CVE-2008-0051",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0051"
},
{
"name": "CVE-2007-3799",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3799"
},
{
"name": "CVE-2008-0048",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0048"
},
{
"name": "CVE-2007-1662",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1662"
},
{
"name": "CVE-2006-3334",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3334"
},
{
"name": "CVE-2008-0998",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0998"
},
{
"name": "CVE-2007-0897",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0897"
},
{
"name": "CVE-2008-0318",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0318"
},
{
"name": "CVE-2007-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
},
{
"name": "CVE-2007-4510",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4510"
},
{
"name": "CVE-2007-5269",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5269"
},
{
"name": "CVE-2007-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5795"
},
{
"name": "CVE-2008-0006",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0006"
},
{
"name": "CVE-2008-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
},
{
"name": "CVE-2008-0728",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0728"
},
{
"name": "CVE-2007-2445",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2445"
},
{
"name": "CVE-2008-0049",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0049"
},
{
"name": "CVE-2007-1745",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1745"
},
{
"name": "CVE-2007-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
},
{
"name": "CVE-2008-0987",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0987"
},
{
"name": "CVE-2008-0993",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0993"
},
{
"name": "CVE-2008-0988",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0988"
},
{
"name": "CVE-2008-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0056"
},
{
"name": "CVE-2008-0992",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0992"
},
{
"name": "CVE-2006-5793",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5793"
},
{
"name": "CVE-2007-6428",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6428"
},
{
"name": "CVE-2008-0989",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0989"
},
{
"name": "CVE-2005-3352",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
},
{
"name": "CVE-2008-0053",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0053"
},
{
"name": "CVE-2007-4767",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4767"
},
{
"name": "CVE-2008-0050",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0050"
},
{
"name": "CVE-2007-5958",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5958"
},
{
"name": "CVE-2006-6481",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6481"
},
{
"name": "CVE-2008-0994",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0994"
},
{
"name": "CVE-2007-6421",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6421"
},
{
"name": "CVE-2008-0058",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0058"
},
{
"name": "CVE-2007-4752",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4752"
},
{
"name": "CVE-2008-0999",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0999"
},
{
"name": "CVE-2007-4560",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4560"
},
{
"name": "CVE-2007-4990",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4990"
},
{
"name": "CVE-2007-4766",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4766"
},
{
"name": "CVE-2007-6388",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
},
{
"name": "CVE-2008-0596",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0596"
},
{
"name": "CVE-2007-4887",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4887"
}
],
"links": [],
"reference": "CERTA-2008-AVI-148",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-03-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": null,
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple 307562 du 18 mars 2008",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
}
]
}
CERTA-2011-AVI-702
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités dans AIX permettent à un utilisateur malveillant d'exécuter du code arbitraire ou de modifier des données.
Description
Plusieurs vulnérabilités affectent AIX :
- deux d'entre elles résident dans le serveur X et permettent à un utilisateur malveillant de corrompre la mémoire et d'exécuter du code arbitraire ;
- un autre problème permet à un utilisateur malveillant de détruire des fichiers vitaux du système ou d'utiliser des logiciels sur des fichiers non autorisés.
Solution
Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
AIX 5.x, 6.x et 7.x.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eAIX 5.x, 6.x et 7.x.\u003c/p\u003e",
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s affectent AIX\u00a0:\n\n- deux d\u0027entre elles r\u00e9sident dans le serveur X et permettent \u00e0 un\n utilisateur malveillant de corrompre la m\u00e9moire et d\u0027ex\u00e9cuter du\n code arbitraire\u00a0;\n- un autre probl\u00e8me permet \u00e0 un utilisateur malveillant de d\u00e9truire\n des fichiers vitaux du syst\u00e8me ou d\u0027utiliser des logiciels sur des\n fichiers non autoris\u00e9s.\n\n## Solution\n\nSe r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2007-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6429"
},
{
"name": "CVE-2007-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6427"
},
{
"name": "CVE-2011-1384",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1384"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 IBM AIX du 15 d\u00e9cembre 2011 :",
"url": "http://aix.software.ibm.com/aix/efixes/security/invscout_advisory2.asc"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 IBM AIX du 14 d\u00e9cembre 2011 :",
"url": "http://aix.software.ibm.com/aix/efixes/security/xorg_advisory.asc"
}
],
"reference": "CERTA-2011-AVI-702",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-12-16T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans AIX permettent \u00e0 un utilisateur\nmalveillant d\u0027ex\u00e9cuter du code arbitraire ou de modifier des donn\u00e9es.\n",
"title": "Vuln\u00e9rabilit\u00e9s dans AIX",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletins de s\u00e9curit\u00e9 IBM AIX des 14 et 15 d\u00e9cembre 2012",
"url": null
}
]
}
FKIE_CVE-2007-6427
Vulnerability from fkie_nvd - Published: 2008-01-18 23:00 - Updated: 2026-04-23 00:35
Severity ?
Summary
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | http://bugs.gentoo.org/show_bug.cgi?id=204362 | Issue Tracking, Patch, Third Party Advisory | |
| cve@mitre.org | http://docs.info.apple.com/article.html?artnum=307562 | Broken Link | |
| cve@mitre.org | http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 | Broken Link | |
| cve@mitre.org | http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643 | Broken Link | |
| cve@mitre.org | http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html | Mailing List | |
| cve@mitre.org | http://lists.freedesktop.org/archives/xorg/2008-January/031918.html | Third Party Advisory | |
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html | Mailing List, Third Party Advisory | |
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html | Mailing List, Third Party Advisory | |
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html | Mailing List, Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28273 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28532 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28535 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28536 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28539 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28540 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28542 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28543 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28550 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28584 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28592 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28616 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28693 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28718 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28838 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28843 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28885 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/28941 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/29139 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/29420 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/29622 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/29707 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/30161 | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/32545 | Third Party Advisory | |
| cve@mitre.org | http://security.gentoo.org/glsa/glsa-200801-09.xml | Third Party Advisory | |
| cve@mitre.org | http://security.gentoo.org/glsa/glsa-200804-05.xml | Third Party Advisory | |
| cve@mitre.org | http://securitytracker.com/id?1019232 | Third Party Advisory, VDB Entry | |
| cve@mitre.org | http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 | Broken Link | |
| cve@mitre.org | http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 | Broken Link | |
| cve@mitre.org | http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm | Third Party Advisory | |
| cve@mitre.org | http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm | Third Party Advisory | |
| cve@mitre.org | http://www.debian.org/security/2008/dsa-1466 | Third Party Advisory | |
| cve@mitre.org | http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml | Third Party Advisory | |
| cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 | Third Party Advisory | |
| cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 | Third Party Advisory | |
| cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 | Third Party Advisory | |
| cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 | Third Party Advisory | |
| cve@mitre.org | http://www.openbsd.org/errata41.html#012_xorg | Third Party Advisory | |
| cve@mitre.org | http://www.openbsd.org/errata42.html#006_xorg | Third Party Advisory | |
| cve@mitre.org | http://www.redhat.com/support/errata/RHSA-2008-0029.html | Third Party Advisory | |
| cve@mitre.org | http://www.redhat.com/support/errata/RHSA-2008-0030.html | Third Party Advisory | |
| cve@mitre.org | http://www.redhat.com/support/errata/RHSA-2008-0031.html | Third Party Advisory | |
| cve@mitre.org | http://www.securityfocus.com/archive/1/487335/100/0/threaded | Third Party Advisory, VDB Entry | |
| cve@mitre.org | http://www.securityfocus.com/bid/27336 | Patch, Third Party Advisory, VDB Entry | |
| cve@mitre.org | http://www.securityfocus.com/bid/27351 | Third Party Advisory, VDB Entry | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2008/0179 | Third Party Advisory | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2008/0184 | Third Party Advisory | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2008/0497/references | Third Party Advisory | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2008/0703 | Third Party Advisory | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2008/0924/references | Third Party Advisory | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2008/3000 | Third Party Advisory | |
| cve@mitre.org | http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities | Mitigation, Third Party Advisory | |
| cve@mitre.org | https://exchange.xforce.ibmcloud.com/vulnerabilities/39759 | Third Party Advisory, VDB Entry | |
| cve@mitre.org | https://issues.rpath.com/browse/RPL-2010 | Broken Link | |
| cve@mitre.org | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 | Third Party Advisory | |
| cve@mitre.org | https://usn.ubuntu.com/571-1/ | Third Party Advisory | |
| cve@mitre.org | https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html | Third Party Advisory | |
| cve@mitre.org | https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://bugs.gentoo.org/show_bug.cgi?id=204362 | Issue Tracking, Patch, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://docs.info.apple.com/article.html?artnum=307562 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html | Mailing List | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.freedesktop.org/archives/xorg/2008-January/031918.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28273 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28532 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28535 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28536 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28539 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28540 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28542 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28543 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28550 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28584 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28592 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28616 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28693 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28718 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28838 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28843 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28885 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/28941 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/29139 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/29420 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/29622 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/29707 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/30161 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/32545 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-200801-09.xml | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-200804-05.xml | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://securitytracker.com/id?1019232 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2008/dsa-1466 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openbsd.org/errata41.html#012_xorg | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openbsd.org/errata42.html#006_xorg | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2008-0029.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2008-0030.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2008-0031.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/archive/1/487335/100/0/threaded | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/27336 | Patch, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/27351 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2008/0179 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2008/0184 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2008/0497/references | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2008/0703 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2008/0924/references | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2008/3000 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities | Mitigation, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://exchange.xforce.ibmcloud.com/vulnerabilities/39759 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://issues.rpath.com/browse/RPL-2010 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/571-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html | Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| x.org | x_server | * | |
| canonical | ubuntu_linux | 6.06 | |
| canonical | ubuntu_linux | 6.10 | |
| canonical | ubuntu_linux | 7.04 | |
| canonical | ubuntu_linux | 7.10 | |
| debian | debian_linux | 3.1 | |
| debian | debian_linux | 4.0 | |
| apple | mac_os_x | * | |
| apple | mac_os_x | * | |
| fedoraproject | fedora | 7 | |
| fedoraproject | fedora | 8 | |
| opensuse | opensuse | 10.2 | |
| opensuse | opensuse | 10.3 | |
| suse | linux | 10.1 | |
| suse | linux_enterprise_desktop | 9 | |
| suse | linux_enterprise_desktop | 10 | |
| suse | linux_enterprise_desktop | 10 | |
| suse | linux_enterprise_server | 8 | |
| suse | linux_enterprise_server | 9 | |
| suse | linux_enterprise_server | 10 | |
| suse | linux_enterprise_software_development_kit | 10 | |
| suse | open_enterprise_server | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F65D4017-F140-482C-ADC8-BEC8072B703E",
"versionEndExcluding": "1.4.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
"matchCriteriaId": "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
"matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
"matchCriteriaId": "823BF8BE-2309-4F67-A5E2-EAD98F723468",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A1E0F574-6859-45A6-B160-7DDE92C07CC7",
"versionEndExcluding": "10.4.11",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D139BCA7-8B43-4BDE-9AE9-5F41F4B6BD0D",
"versionEndExcluding": "10.5.2",
"versionStartIncluding": "10.5.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*",
"matchCriteriaId": "E3EFD171-01F7-450B-B6F3-0F7E443A2337",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*",
"matchCriteriaId": "72E4DB7F-07C3-46BB-AAA2-05CD0312C57F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*",
"matchCriteriaId": "24818450-FDA1-429A-AC17-68F44F584217",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
"matchCriteriaId": "C35B68DF-1440-4587-8458-9C5F4D1E43F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux:10.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A9BD0E68-2DC1-47EA-882A-6F5921A0F1BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*",
"matchCriteriaId": "68B14008-5E0A-4187-AF93-DE2FF5BA5921",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:*",
"matchCriteriaId": "4C1B3637-1CDC-47FE-B19C-95FCEB833450",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*",
"matchCriteriaId": "C8FC5E32-C9E3-49F6-9481-1DB60DEE8A07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*",
"matchCriteriaId": "FA1E7EFF-1CCA-473B-8D5C-30D59C26DC70",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
"matchCriteriaId": "4CD2D897-E321-4CED-92E0-11A98B52053C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*",
"matchCriteriaId": "29184B59-5756-48DB-930C-69D5CD628548",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*",
"matchCriteriaId": "33EB57D5-DE8D-417C-8C00-AD331D61181C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:open_enterprise_server:-:*:*:*:*:*:*:*",
"matchCriteriaId": "012EA049-526D-44A7-9EFE-544D9EBE0D44",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990."
},
{
"lang": "es",
"value": "La extensi\u00f3n XInput de X.Org Xserver versiones anteriores a 1.4.1 permite a atacantes locales o remotos dependientes del contexto ejecutar c\u00f3digo de su elecci\u00f3n mediante peticiones relativas al intercambio de bytes y corrupci\u00f3n de cabecera dentro d m\u00faltiples funciones, vulnerabilidad distinta de CVE-2007-4990."
}
],
"id": "CVE-2007-6427",
"lastModified": "2026-04-23T00:35:47.467",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2008-01-18T23:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=204362"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.freedesktop.org/archives/xorg/2008-January/031918.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28273"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28532"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28535"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28536"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28539"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28540"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28542"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28543"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28550"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28584"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28592"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28616"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28693"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28718"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28838"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28843"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28885"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28941"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29139"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29420"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29622"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29707"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30161"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/32545"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200801-09.xml"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200804-05.xml"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1019232"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:021"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:022"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:023"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:025"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.openbsd.org/errata41.html#012_xorg"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.openbsd.org/errata42.html#006_xorg"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0031.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/487335/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/27336"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/27351"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0179"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0184"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0497/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0703"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/3000"
},
{
"source": "cve@mitre.org",
"tags": [
"Mitigation",
"Third Party Advisory"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39759"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "https://issues.rpath.com/browse/RPL-2010"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/571-1/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=204362"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.freedesktop.org/archives/xorg/2008-January/031918.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28273"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28532"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28535"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28536"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28539"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28540"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28542"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28543"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28550"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28584"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28592"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28616"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28693"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28718"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28838"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28843"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28885"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28941"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29139"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29420"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29622"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29707"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30161"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/32545"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200801-09.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200804-05.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1019232"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:021"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:022"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:023"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:025"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.openbsd.org/errata41.html#012_xorg"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.openbsd.org/errata42.html#006_xorg"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0031.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/487335/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/27336"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/27351"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0179"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0184"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0497/references"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0703"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/3000"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mitigation",
"Third Party Advisory"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39759"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://issues.rpath.com/browse/RPL-2010"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/571-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-R7G2-76RH-RJM8
Vulnerability from github – Published: 2022-05-01 18:42 – Updated: 2025-04-09 03:50
VLAI?
Details
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.
{
"affected": [],
"aliases": [
"CVE-2007-6427"
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2008-01-18T23:00:00Z",
"severity": "HIGH"
},
"details": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.",
"id": "GHSA-r7g2-76rh-rjm8",
"modified": "2025-04-09T03:50:38Z",
"published": "2022-05-01T18:42:50Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6427"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39759"
},
{
"type": "WEB",
"url": "https://issues.rpath.com/browse/RPL-2010"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/571-1"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html"
},
{
"type": "WEB",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=204362"
},
{
"type": "WEB",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"type": "WEB",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"type": "WEB",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.freedesktop.org/archives/xorg/2008-January/031918.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28273"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28532"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28535"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28536"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28539"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28540"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28542"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28543"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28550"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28584"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28592"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28616"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28693"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28718"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28838"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28843"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28885"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28941"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29139"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29420"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29622"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29707"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/30161"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/32545"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-200801-09.xml"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-200804-05.xml"
},
{
"type": "WEB",
"url": "http://securitytracker.com/id?1019232"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1"
},
{
"type": "WEB",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"type": "WEB",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"type": "WEB",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:021"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:022"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:023"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:025"
},
{
"type": "WEB",
"url": "http://www.openbsd.org/errata41.html#012_xorg"
},
{
"type": "WEB",
"url": "http://www.openbsd.org/errata42.html#006_xorg"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0031.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/487335/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/27336"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/27351"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/0179"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/0184"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/0497/references"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/0703"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/3000"
},
{
"type": "WEB",
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2007-6427
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2007-6427",
"description": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.",
"id": "GSD-2007-6427",
"references": [
"https://www.suse.com/security/cve/CVE-2007-6427.html",
"https://www.debian.org/security/2008/dsa-1466",
"https://access.redhat.com/errata/RHSA-2008:0031",
"https://access.redhat.com/errata/RHSA-2008:0030",
"https://access.redhat.com/errata/RHSA-2008:0029",
"https://linux.oracle.com/cve/CVE-2007-6427.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2007-6427"
],
"details": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.",
"id": "GSD-2007-6427",
"modified": "2023-12-13T01:21:39.071495Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6427",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "oval:org.mitre.oval:def:10372",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372"
},
{
"name": "28542",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28542"
},
{
"name": "29139",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29139"
},
{
"name": "27336",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/27336"
},
{
"name": "ADV-2008-0184",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0184"
},
{
"name": "29622",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29622"
},
{
"name": "FEDORA-2008-0831",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html"
},
{
"name": "SUSE-SA:2008:003",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"name": "SUSE-SR:2008:008",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html"
},
{
"name": "28532",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28532"
},
{
"name": "29707",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29707"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm"
},
{
"name": "28843",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28843"
},
{
"name": "DSA-1466",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"name": "27351",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/27351"
},
{
"name": "28540",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28540"
},
{
"name": "SSRT080083",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"name": "20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/487335/100/0/threaded"
},
{
"name": "ADV-2008-0703",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0703"
},
{
"name": "MDVSA-2008:021",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:021"
},
{
"name": "ADV-2008-0924",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "28718",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28718"
},
{
"name": "200153",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1"
},
{
"name": "RHSA-2008:0029",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
},
{
"name": "28584",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28584"
},
{
"name": "[4.1] 20080208 012: SECURITY FIX: February 8, 2008",
"refsource": "OPENBSD",
"url": "http://www.openbsd.org/errata41.html#012_xorg"
},
{
"name": "28941",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28941"
},
{
"name": "28592",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28592"
},
{
"name": "HPSBUX02381",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"name": "29420",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29420"
},
{
"name": "MDVSA-2008:022",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:022"
},
{
"name": "APPLE-SA-2008-03-18",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "30161",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30161"
},
{
"name": "GLSA-200805-07",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml"
},
{
"name": "RHSA-2008:0030",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
},
{
"name": "28543",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28543"
},
{
"name": "28273",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28273"
},
{
"name": "RHSA-2008:0031",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0031.html"
},
{
"name": "28550",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28550"
},
{
"name": "ADV-2008-0497",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0497/references"
},
{
"name": "http://bugs.gentoo.org/show_bug.cgi?id=204362",
"refsource": "CONFIRM",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=204362"
},
{
"name": "MDVSA-2008:023",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:023"
},
{
"name": "28885",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28885"
},
{
"name": "103200",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"name": "MDVSA-2008:025",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:025"
},
{
"name": "USN-571-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/571-1/"
},
{
"name": "GLSA-200804-05",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200804-05.xml"
},
{
"name": "28535",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28535"
},
{
"name": "ADV-2008-3000",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/3000"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=307562",
"refsource": "CONFIRM",
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "20080117 Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities",
"refsource": "IDEFENSE",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643"
},
{
"name": "[xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server",
"refsource": "MLIST",
"url": "http://lists.freedesktop.org/archives/xorg/2008-January/031918.html"
},
{
"name": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities",
"refsource": "CONFIRM",
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities"
},
{
"name": "32545",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/32545"
},
{
"name": "xorg-xinput-code-execution(39759)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39759"
},
{
"name": "28838",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28838"
},
{
"name": "1019232",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1019232"
},
{
"name": "https://issues.rpath.com/browse/RPL-2010",
"refsource": "CONFIRM",
"url": "https://issues.rpath.com/browse/RPL-2010"
},
{
"name": "[4.2] 20080208 006: SECURITY FIX: February 8, 2008",
"refsource": "OPENBSD",
"url": "http://www.openbsd.org/errata42.html#006_xorg"
},
{
"name": "28539",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28539"
},
{
"name": "SUSE-SR:2008:003",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
},
{
"name": "28616",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28616"
},
{
"name": "FEDORA-2008-0760",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html"
},
{
"name": "28536",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28536"
},
{
"name": "28693",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28693"
},
{
"name": "GLSA-200801-09",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200801-09.xml"
},
{
"name": "ADV-2008-0179",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0179"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.4.1",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.4.11",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.5.2",
"versionStartIncluding": "10.5.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux:10.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:open_enterprise_server:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6427"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20080117 Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities",
"refsource": "IDEFENSE",
"tags": [
"Broken Link"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643"
},
{
"name": "[xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server",
"refsource": "MLIST",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.freedesktop.org/archives/xorg/2008-January/031918.html"
},
{
"name": "103200",
"refsource": "SUNALERT",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1"
},
{
"name": "27336",
"refsource": "BID",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/27336"
},
{
"name": "DSA-1466",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1466"
},
{
"name": "RHSA-2008:0029",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0029.html"
},
{
"name": "RHSA-2008:0030",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0030.html"
},
{
"name": "RHSA-2008:0031",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0031.html"
},
{
"name": "SUSE-SA:2008:003",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html"
},
{
"name": "27351",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/27351"
},
{
"name": "1019232",
"refsource": "SECTRACK",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1019232"
},
{
"name": "28532",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28532"
},
{
"name": "28535",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28535"
},
{
"name": "28536",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28536"
},
{
"name": "28539",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28539"
},
{
"name": "28540",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28540"
},
{
"name": "28542",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28542"
},
{
"name": "28543",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28543"
},
{
"name": "28550",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28550"
},
{
"name": "http://bugs.gentoo.org/show_bug.cgi?id=204362",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=204362"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm"
},
{
"name": "FEDORA-2008-0760",
"refsource": "FEDORA",
"tags": [
"Third Party Advisory"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html"
},
{
"name": "FEDORA-2008-0831",
"refsource": "FEDORA",
"tags": [
"Third Party Advisory"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html"
},
{
"name": "GLSA-200801-09",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200801-09.xml"
},
{
"name": "MDVSA-2008:021",
"refsource": "MANDRIVA",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:021"
},
{
"name": "MDVSA-2008:022",
"refsource": "MANDRIVA",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:022"
},
{
"name": "MDVSA-2008:023",
"refsource": "MANDRIVA",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:023"
},
{
"name": "MDVSA-2008:025",
"refsource": "MANDRIVA",
"tags": [
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:025"
},
{
"name": "28273",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28273"
},
{
"name": "28592",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28592"
},
{
"name": "28616",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28616"
},
{
"name": "28584",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28584"
},
{
"name": "28693",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28693"
},
{
"name": "https://issues.rpath.com/browse/RPL-2010",
"refsource": "CONFIRM",
"tags": [
"Broken Link"
],
"url": "https://issues.rpath.com/browse/RPL-2010"
},
{
"name": "28718",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28718"
},
{
"name": "[4.1] 20080208 012: SECURITY FIX: February 8, 2008",
"refsource": "OPENBSD",
"tags": [
"Third Party Advisory"
],
"url": "http://www.openbsd.org/errata41.html#012_xorg"
},
{
"name": "[4.2] 20080208 006: SECURITY FIX: February 8, 2008",
"refsource": "OPENBSD",
"tags": [
"Third Party Advisory"
],
"url": "http://www.openbsd.org/errata42.html#006_xorg"
},
{
"name": "SUSE-SR:2008:003",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
},
{
"name": "28838",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28838"
},
{
"name": "28843",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28843"
},
{
"name": "28885",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28885"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm"
},
{
"name": "200153",
"refsource": "SUNALERT",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1"
},
{
"name": "28941",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28941"
},
{
"name": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities",
"refsource": "CONFIRM",
"tags": [
"Mitigation",
"Third Party Advisory"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile112539\u0026label=AIX%20X%20server%20multiple%20vulnerabilities"
},
{
"name": "29139",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29139"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=307562",
"refsource": "CONFIRM",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=307562"
},
{
"name": "APPLE-SA-2008-03-18",
"refsource": "APPLE",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
},
{
"name": "29420",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29420"
},
{
"name": "SUSE-SR:2008:008",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html"
},
{
"name": "29622",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29622"
},
{
"name": "GLSA-200804-05",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200804-05.xml"
},
{
"name": "29707",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29707"
},
{
"name": "GLSA-200805-07",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml"
},
{
"name": "30161",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30161"
},
{
"name": "ADV-2008-3000",
"refsource": "VUPEN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/3000"
},
{
"name": "32545",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/32545"
},
{
"name": "SSRT080083",
"refsource": "HP",
"tags": [
"Broken Link"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321"
},
{
"name": "ADV-2008-0184",
"refsource": "VUPEN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0184"
},
{
"name": "ADV-2008-0179",
"refsource": "VUPEN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0179"
},
{
"name": "ADV-2008-0497",
"refsource": "VUPEN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0497/references"
},
{
"name": "ADV-2008-0924",
"refsource": "VUPEN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0924/references"
},
{
"name": "ADV-2008-0703",
"refsource": "VUPEN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/0703"
},
{
"name": "xorg-xinput-code-execution(39759)",
"refsource": "XF",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39759"
},
{
"name": "oval:org.mitre.oval:def:10372",
"refsource": "OVAL",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372"
},
{
"name": "USN-571-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/571-1/"
},
{
"name": "20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs",
"refsource": "BUGTRAQ",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/487335/100/0/threaded"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2020-11-20T16:47Z",
"publishedDate": "2008-01-18T23:00Z"
}
}
}
OPENSUSE-SU-2024:11525-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
xorg-x11-server-1.20.13-1.2 on GA media
Severity
Moderate
Notes
Title of the patch: xorg-x11-server-1.20.13-1.2 on GA media
Description of the patch: These are all security issues fixed in the xorg-x11-server-1.20.13-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-11525
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.6 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.4 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
112 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://www.suse.com/security/cve/CVE-2006-6101/ | self |
| https://www.suse.com/security/cve/CVE-2006-6102/ | self |
| https://www.suse.com/security/cve/CVE-2006-6103/ | self |
| https://www.suse.com/security/cve/CVE-2007-1003/ | self |
| https://www.suse.com/security/cve/CVE-2007-5760/ | self |
| https://www.suse.com/security/cve/CVE-2007-6427/ | self |
| https://www.suse.com/security/cve/CVE-2007-6428/ | self |
| https://www.suse.com/security/cve/CVE-2007-6429/ | self |
| https://www.suse.com/security/cve/CVE-2008-0006/ | self |
| https://www.suse.com/security/cve/CVE-2008-1377/ | self |
| https://www.suse.com/security/cve/CVE-2008-1379/ | self |
| https://www.suse.com/security/cve/CVE-2008-2360/ | self |
| https://www.suse.com/security/cve/CVE-2008-2361/ | self |
| https://www.suse.com/security/cve/CVE-2008-2362/ | self |
| https://www.suse.com/security/cve/CVE-2017-10971/ | self |
| https://www.suse.com/security/cve/CVE-2017-12176/ | self |
| https://www.suse.com/security/cve/CVE-2017-12187/ | self |
| https://www.suse.com/security/cve/CVE-2017-13721/ | self |
| https://www.suse.com/security/cve/CVE-2017-2624/ | self |
| https://www.suse.com/security/cve/CVE-2018-14665/ | self |
| https://www.suse.com/security/cve/CVE-2020-14345/ | self |
| https://www.suse.com/security/cve/CVE-2020-14346/ | self |
| https://www.suse.com/security/cve/CVE-2020-14347/ | self |
| https://www.suse.com/security/cve/CVE-2020-14360/ | self |
| https://www.suse.com/security/cve/CVE-2020-14361/ | self |
| https://www.suse.com/security/cve/CVE-2020-14362/ | self |
| https://www.suse.com/security/cve/CVE-2020-25712/ | self |
| https://www.suse.com/security/cve/CVE-2021-3472/ | self |
| https://www.suse.com/security/cve/CVE-2006-6101 | external |
| https://bugzilla.suse.com/225972 | external |
| https://www.suse.com/security/cve/CVE-2006-6102 | external |
| https://bugzilla.suse.com/225974 | external |
| https://www.suse.com/security/cve/CVE-2006-6103 | external |
| https://bugzilla.suse.com/225975 | external |
| https://www.suse.com/security/cve/CVE-2007-1003 | external |
| https://bugzilla.suse.com/243978 | external |
| https://bugzilla.suse.com/261141 | external |
| https://www.suse.com/security/cve/CVE-2007-5760 | external |
| https://bugzilla.suse.com/345496 | external |
| https://www.suse.com/security/cve/CVE-2007-6427 | external |
| https://bugzilla.suse.com/345127 | external |
| https://www.suse.com/security/cve/CVE-2007-6428 | external |
| https://bugzilla.suse.com/345128 | external |
| https://www.suse.com/security/cve/CVE-2007-6429 | external |
| https://bugzilla.suse.com/345130 | external |
| https://bugzilla.suse.com/345131 | external |
| https://www.suse.com/security/cve/CVE-2008-0006 | external |
| https://bugzilla.suse.com/348296 | external |
| https://www.suse.com/security/cve/CVE-2008-1377 | external |
| https://bugzilla.suse.com/374318 | external |
| https://bugzilla.suse.com/374323 | external |
| https://www.suse.com/security/cve/CVE-2008-1379 | external |
| https://bugzilla.suse.com/374318 | external |
| https://bugzilla.suse.com/374320 | external |
| https://www.suse.com/security/cve/CVE-2008-2360 | external |
| https://bugzilla.suse.com/374321 | external |
| https://www.suse.com/security/cve/CVE-2008-2361 | external |
| https://bugzilla.suse.com/374321 | external |
| https://www.suse.com/security/cve/CVE-2008-2362 | external |
| https://bugzilla.suse.com/374321 | external |
| https://www.suse.com/security/cve/CVE-2017-10971 | external |
| https://bugzilla.suse.com/1035283 | external |
| https://bugzilla.suse.com/1047730 | external |
| https://www.suse.com/security/cve/CVE-2017-12176 | external |
| https://bugzilla.suse.com/1063041 | external |
| https://www.suse.com/security/cve/CVE-2017-12187 | external |
| https://bugzilla.suse.com/1063034 | external |
| https://www.suse.com/security/cve/CVE-2017-13721 | external |
| https://bugzilla.suse.com/1051150 | external |
| https://bugzilla.suse.com/1052984 | external |
| https://www.suse.com/security/cve/CVE-2017-2624 | external |
| https://bugzilla.suse.com/1025029 | external |
| https://bugzilla.suse.com/1025639 | external |
| https://bugzilla.suse.com/1035283 | external |
| https://www.suse.com/security/cve/CVE-2018-14665 | external |
| https://bugzilla.suse.com/1111697 | external |
| https://bugzilla.suse.com/1112020 | external |
| https://www.suse.com/security/cve/CVE-2020-14345 | external |
| https://bugzilla.suse.com/1174635 | external |
| https://bugzilla.suse.com/1174638 | external |
| https://bugzilla.suse.com/1174908 | external |
| https://bugzilla.suse.com/1174910 | external |
| https://bugzilla.suse.com/1174913 | external |
| https://bugzilla.suse.com/1177596 | external |
| https://bugzilla.suse.com/1181067 | external |
| https://www.suse.com/security/cve/CVE-2020-14346 | external |
| https://bugzilla.suse.com/1174635 | external |
| https://bugzilla.suse.com/1174638 | external |
| https://bugzilla.suse.com/1174910 | external |
| https://bugzilla.suse.com/1174913 | external |
| https://www.suse.com/security/cve/CVE-2020-14347 | external |
| https://bugzilla.suse.com/1174633 | external |
| https://www.suse.com/security/cve/CVE-2020-14360 | external |
| https://bugzilla.suse.com/1174908 | external |
| https://bugzilla.suse.com/1177596 | external |
| https://www.suse.com/security/cve/CVE-2020-14361 | external |
| https://bugzilla.suse.com/1174635 | external |
| https://bugzilla.suse.com/1174638 | external |
| https://bugzilla.suse.com/1174910 | external |
| https://bugzilla.suse.com/1174913 | external |
| https://www.suse.com/security/cve/CVE-2020-14362 | external |
| https://bugzilla.suse.com/1174635 | external |
| https://bugzilla.suse.com/1174638 | external |
| https://bugzilla.suse.com/1174910 | external |
| https://bugzilla.suse.com/1174913 | external |
| https://www.suse.com/security/cve/CVE-2020-25712 | external |
| https://bugzilla.suse.com/1174908 | external |
| https://bugzilla.suse.com/1177596 | external |
| https://www.suse.com/security/cve/CVE-2021-3472 | external |
| https://bugzilla.suse.com/1180128 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "xorg-x11-server-1.20.13-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the xorg-x11-server-1.20.13-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11525",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11525-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-6101 page",
"url": "https://www.suse.com/security/cve/CVE-2006-6101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-6102 page",
"url": "https://www.suse.com/security/cve/CVE-2006-6102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-6103 page",
"url": "https://www.suse.com/security/cve/CVE-2006-6103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-1003 page",
"url": "https://www.suse.com/security/cve/CVE-2007-1003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-5760 page",
"url": "https://www.suse.com/security/cve/CVE-2007-5760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-6427 page",
"url": "https://www.suse.com/security/cve/CVE-2007-6427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-6428 page",
"url": "https://www.suse.com/security/cve/CVE-2007-6428/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-6429 page",
"url": "https://www.suse.com/security/cve/CVE-2007-6429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-0006 page",
"url": "https://www.suse.com/security/cve/CVE-2008-0006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1377 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1377/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1379 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1379/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2360 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2361 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2361/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2362 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2362/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10971 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-12176 page",
"url": "https://www.suse.com/security/cve/CVE-2017-12176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-12187 page",
"url": "https://www.suse.com/security/cve/CVE-2017-12187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-13721 page",
"url": "https://www.suse.com/security/cve/CVE-2017-13721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-2624 page",
"url": "https://www.suse.com/security/cve/CVE-2017-2624/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14665 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14345 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14346 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14346/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14347 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14360 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14361 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14361/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14362 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14362/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25712 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3472 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3472/"
}
],
"title": "xorg-x11-server-1.20.13-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11525-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.13-1.2.aarch64",
"product": {
"name": "xorg-x11-server-1.20.13-1.2.aarch64",
"product_id": "xorg-x11-server-1.20.13-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"product_id": "xorg-x11-server-Xvfb-1.20.13-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.13-1.2.aarch64",
"product": {
"name": "xorg-x11-server-extra-1.20.13-1.2.aarch64",
"product_id": "xorg-x11-server-extra-1.20.13-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"product": {
"name": "xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"product_id": "xorg-x11-server-sdk-1.20.13-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.13-1.2.aarch64",
"product": {
"name": "xorg-x11-server-source-1.20.13-1.2.aarch64",
"product_id": "xorg-x11-server-source-1.20.13-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"product": {
"name": "xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"product_id": "xorg-x11-server-wrapper-1.20.13-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.13-1.2.ppc64le",
"product": {
"name": "xorg-x11-server-1.20.13-1.2.ppc64le",
"product_id": "xorg-x11-server-1.20.13-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"product_id": "xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"product": {
"name": "xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"product_id": "xorg-x11-server-extra-1.20.13-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"product_id": "xorg-x11-server-sdk-1.20.13-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.13-1.2.ppc64le",
"product": {
"name": "xorg-x11-server-source-1.20.13-1.2.ppc64le",
"product_id": "xorg-x11-server-source-1.20.13-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"product": {
"name": "xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"product_id": "xorg-x11-server-wrapper-1.20.13-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.13-1.2.s390x",
"product": {
"name": "xorg-x11-server-1.20.13-1.2.s390x",
"product_id": "xorg-x11-server-1.20.13-1.2.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"product_id": "xorg-x11-server-Xvfb-1.20.13-1.2.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.13-1.2.s390x",
"product": {
"name": "xorg-x11-server-extra-1.20.13-1.2.s390x",
"product_id": "xorg-x11-server-extra-1.20.13-1.2.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.13-1.2.s390x",
"product": {
"name": "xorg-x11-server-sdk-1.20.13-1.2.s390x",
"product_id": "xorg-x11-server-sdk-1.20.13-1.2.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.13-1.2.s390x",
"product": {
"name": "xorg-x11-server-source-1.20.13-1.2.s390x",
"product_id": "xorg-x11-server-source-1.20.13-1.2.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"product": {
"name": "xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"product_id": "xorg-x11-server-wrapper-1.20.13-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.13-1.2.x86_64",
"product": {
"name": "xorg-x11-server-1.20.13-1.2.x86_64",
"product_id": "xorg-x11-server-1.20.13-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"product_id": "xorg-x11-server-Xvfb-1.20.13-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.13-1.2.x86_64",
"product": {
"name": "xorg-x11-server-extra-1.20.13-1.2.x86_64",
"product_id": "xorg-x11-server-extra-1.20.13-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"product": {
"name": "xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"product_id": "xorg-x11-server-sdk-1.20.13-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.13-1.2.x86_64",
"product": {
"name": "xorg-x11-server-source-1.20.13-1.2.x86_64",
"product_id": "xorg-x11-server-source-1.20.13-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wrapper-1.20.13-1.2.x86_64",
"product": {
"name": "xorg-x11-server-wrapper-1.20.13-1.2.x86_64",
"product_id": "xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.13-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64"
},
"product_reference": "xorg-x11-server-1.20.13-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.13-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.13-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.13-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x"
},
"product_reference": "xorg-x11-server-1.20.13-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.13-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64"
},
"product_reference": "xorg-x11-server-1.20.13-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-1.20.13-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.13-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.13-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.13-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.13-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x"
},
"product_reference": "xorg-x11-server-extra-1.20.13-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.13-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.13-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.13-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.13-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.13-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x"
},
"product_reference": "xorg-x11-server-sdk-1.20.13-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.13-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-1.20.13-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64"
},
"product_reference": "xorg-x11-server-source-1.20.13-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-1.20.13-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le"
},
"product_reference": "xorg-x11-server-source-1.20.13-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-1.20.13-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x"
},
"product_reference": "xorg-x11-server-source-1.20.13-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-1.20.13-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64"
},
"product_reference": "xorg-x11-server-source-1.20.13-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-wrapper-1.20.13-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64"
},
"product_reference": "xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-wrapper-1.20.13-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le"
},
"product_reference": "xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-wrapper-1.20.13-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x"
},
"product_reference": "xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-wrapper-1.20.13-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
},
"product_reference": "xorg-x11-server-wrapper-1.20.13-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-6101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-6101"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of glyph management data structures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-6101",
"url": "https://www.suse.com/security/cve/CVE-2006-6101"
},
{
"category": "external",
"summary": "SUSE Bug 225972 for CVE-2006-6101",
"url": "https://bugzilla.suse.com/225972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-6101"
},
{
"cve": "CVE-2006-6102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-6102"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-6102",
"url": "https://www.suse.com/security/cve/CVE-2006-6102"
},
{
"category": "external",
"summary": "SUSE Bug 225974 for CVE-2006-6102",
"url": "https://bugzilla.suse.com/225974"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2006-6102"
},
{
"cve": "CVE-2006-6103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-6103"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-6103",
"url": "https://www.suse.com/security/cve/CVE-2006-6103"
},
{
"category": "external",
"summary": "SUSE Bug 225975 for CVE-2006-6103",
"url": "https://bugzilla.suse.com/225975"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-6103"
},
{
"cve": "CVE-2007-1003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-1003"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-1003",
"url": "https://www.suse.com/security/cve/CVE-2007-1003"
},
{
"category": "external",
"summary": "SUSE Bug 243978 for CVE-2007-1003",
"url": "https://bugzilla.suse.com/243978"
},
{
"category": "external",
"summary": "SUSE Bug 261141 for CVE-2007-1003",
"url": "https://bugzilla.suse.com/261141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2007-1003"
},
{
"cve": "CVE-2007-5760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-5760"
}
],
"notes": [
{
"category": "general",
"text": "Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-5760",
"url": "https://www.suse.com/security/cve/CVE-2007-5760"
},
{
"category": "external",
"summary": "SUSE Bug 345496 for CVE-2007-5760",
"url": "https://bugzilla.suse.com/345496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-5760"
},
{
"cve": "CVE-2007-6427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-6427"
}
],
"notes": [
{
"category": "general",
"text": "The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-6427",
"url": "https://www.suse.com/security/cve/CVE-2007-6427"
},
{
"category": "external",
"summary": "SUSE Bug 345127 for CVE-2007-6427",
"url": "https://bugzilla.suse.com/345127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-6427"
},
{
"cve": "CVE-2007-6428",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-6428"
}
],
"notes": [
{
"category": "general",
"text": "The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-6428",
"url": "https://www.suse.com/security/cve/CVE-2007-6428"
},
{
"category": "external",
"summary": "SUSE Bug 345128 for CVE-2007-6428",
"url": "https://bugzilla.suse.com/345128"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-6428"
},
{
"cve": "CVE-2007-6429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-6429"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-6429",
"url": "https://www.suse.com/security/cve/CVE-2007-6429"
},
{
"category": "external",
"summary": "SUSE Bug 345130 for CVE-2007-6429",
"url": "https://bugzilla.suse.com/345130"
},
{
"category": "external",
"summary": "SUSE Bug 345131 for CVE-2007-6429",
"url": "https://bugzilla.suse.com/345131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-6429"
},
{
"cve": "CVE-2008-0006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-0006"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-0006",
"url": "https://www.suse.com/security/cve/CVE-2008-0006"
},
{
"category": "external",
"summary": "SUSE Bug 348296 for CVE-2008-0006",
"url": "https://bugzilla.suse.com/348296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-0006"
},
{
"cve": "CVE-2008-1377",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1377"
}
],
"notes": [
{
"category": "general",
"text": "The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1377",
"url": "https://www.suse.com/security/cve/CVE-2008-1377"
},
{
"category": "external",
"summary": "SUSE Bug 374318 for CVE-2008-1377",
"url": "https://bugzilla.suse.com/374318"
},
{
"category": "external",
"summary": "SUSE Bug 374323 for CVE-2008-1377",
"url": "https://bugzilla.suse.com/374323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-1377"
},
{
"cve": "CVE-2008-1379",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1379"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1379",
"url": "https://www.suse.com/security/cve/CVE-2008-1379"
},
{
"category": "external",
"summary": "SUSE Bug 374318 for CVE-2008-1379",
"url": "https://bugzilla.suse.com/374318"
},
{
"category": "external",
"summary": "SUSE Bug 374320 for CVE-2008-1379",
"url": "https://bugzilla.suse.com/374320"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-1379"
},
{
"cve": "CVE-2008-2360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2360"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2360",
"url": "https://www.suse.com/security/cve/CVE-2008-2360"
},
{
"category": "external",
"summary": "SUSE Bug 374321 for CVE-2008-2360",
"url": "https://bugzilla.suse.com/374321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-2360"
},
{
"cve": "CVE-2008-2361",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2361"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size, which triggers a dereference of unmapped memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2361",
"url": "https://www.suse.com/security/cve/CVE-2008-2361"
},
{
"category": "external",
"summary": "SUSE Bug 374321 for CVE-2008-2361",
"url": "https://bugzilla.suse.com/374321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-2361"
},
{
"cve": "CVE-2008-2362",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2362"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2362",
"url": "https://www.suse.com/security/cve/CVE-2008-2362"
},
{
"category": "external",
"summary": "SUSE Bug 374321 for CVE-2008-2362",
"url": "https://bugzilla.suse.com/374321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-2362"
},
{
"cve": "CVE-2017-10971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10971"
}
],
"notes": [
{
"category": "general",
"text": "In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10971",
"url": "https://www.suse.com/security/cve/CVE-2017-10971"
},
{
"category": "external",
"summary": "SUSE Bug 1035283 for CVE-2017-10971",
"url": "https://bugzilla.suse.com/1035283"
},
{
"category": "external",
"summary": "SUSE Bug 1047730 for CVE-2017-10971",
"url": "https://bugzilla.suse.com/1047730"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10971"
},
{
"cve": "CVE-2017-12176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-12176"
}
],
"notes": [
{
"category": "general",
"text": "xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-12176",
"url": "https://www.suse.com/security/cve/CVE-2017-12176"
},
{
"category": "external",
"summary": "SUSE Bug 1063041 for CVE-2017-12176",
"url": "https://bugzilla.suse.com/1063041"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-12176"
},
{
"cve": "CVE-2017-12187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-12187"
}
],
"notes": [
{
"category": "general",
"text": "xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-12187",
"url": "https://www.suse.com/security/cve/CVE-2017-12187"
},
{
"category": "external",
"summary": "SUSE Bug 1063034 for CVE-2017-12187",
"url": "https://bugzilla.suse.com/1063034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-12187"
},
{
"cve": "CVE-2017-13721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-13721"
}
],
"notes": [
{
"category": "general",
"text": "In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-13721",
"url": "https://www.suse.com/security/cve/CVE-2017-13721"
},
{
"category": "external",
"summary": "SUSE Bug 1051150 for CVE-2017-13721",
"url": "https://bugzilla.suse.com/1051150"
},
{
"category": "external",
"summary": "SUSE Bug 1052984 for CVE-2017-13721",
"url": "https://bugzilla.suse.com/1052984"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-13721"
},
{
"cve": "CVE-2017-2624",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-2624"
}
],
"notes": [
{
"category": "general",
"text": "It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-2624",
"url": "https://www.suse.com/security/cve/CVE-2017-2624"
},
{
"category": "external",
"summary": "SUSE Bug 1025029 for CVE-2017-2624",
"url": "https://bugzilla.suse.com/1025029"
},
{
"category": "external",
"summary": "SUSE Bug 1025639 for CVE-2017-2624",
"url": "https://bugzilla.suse.com/1025639"
},
{
"category": "external",
"summary": "SUSE Bug 1035283 for CVE-2017-2624",
"url": "https://bugzilla.suse.com/1035283"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-2624"
},
{
"cve": "CVE-2018-14665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14665"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14665",
"url": "https://www.suse.com/security/cve/CVE-2018-14665"
},
{
"category": "external",
"summary": "SUSE Bug 1111697 for CVE-2018-14665",
"url": "https://bugzilla.suse.com/1111697"
},
{
"category": "external",
"summary": "SUSE Bug 1112020 for CVE-2018-14665",
"url": "https://bugzilla.suse.com/1112020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-14665"
},
{
"cve": "CVE-2020-14345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14345"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14345",
"url": "https://www.suse.com/security/cve/CVE-2020-14345"
},
{
"category": "external",
"summary": "SUSE Bug 1174635 for CVE-2020-14345",
"url": "https://bugzilla.suse.com/1174635"
},
{
"category": "external",
"summary": "SUSE Bug 1174638 for CVE-2020-14345",
"url": "https://bugzilla.suse.com/1174638"
},
{
"category": "external",
"summary": "SUSE Bug 1174908 for CVE-2020-14345",
"url": "https://bugzilla.suse.com/1174908"
},
{
"category": "external",
"summary": "SUSE Bug 1174910 for CVE-2020-14345",
"url": "https://bugzilla.suse.com/1174910"
},
{
"category": "external",
"summary": "SUSE Bug 1174913 for CVE-2020-14345",
"url": "https://bugzilla.suse.com/1174913"
},
{
"category": "external",
"summary": "SUSE Bug 1177596 for CVE-2020-14345",
"url": "https://bugzilla.suse.com/1177596"
},
{
"category": "external",
"summary": "SUSE Bug 1181067 for CVE-2020-14345",
"url": "https://bugzilla.suse.com/1181067"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14345"
},
{
"cve": "CVE-2020-14346",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14346"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14346",
"url": "https://www.suse.com/security/cve/CVE-2020-14346"
},
{
"category": "external",
"summary": "SUSE Bug 1174635 for CVE-2020-14346",
"url": "https://bugzilla.suse.com/1174635"
},
{
"category": "external",
"summary": "SUSE Bug 1174638 for CVE-2020-14346",
"url": "https://bugzilla.suse.com/1174638"
},
{
"category": "external",
"summary": "SUSE Bug 1174910 for CVE-2020-14346",
"url": "https://bugzilla.suse.com/1174910"
},
{
"category": "external",
"summary": "SUSE Bug 1174913 for CVE-2020-14346",
"url": "https://bugzilla.suse.com/1174913"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14346"
},
{
"cve": "CVE-2020-14347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14347"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14347",
"url": "https://www.suse.com/security/cve/CVE-2020-14347"
},
{
"category": "external",
"summary": "SUSE Bug 1174633 for CVE-2020-14347",
"url": "https://bugzilla.suse.com/1174633"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14347"
},
{
"cve": "CVE-2020-14360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14360"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14360",
"url": "https://www.suse.com/security/cve/CVE-2020-14360"
},
{
"category": "external",
"summary": "SUSE Bug 1174908 for CVE-2020-14360",
"url": "https://bugzilla.suse.com/1174908"
},
{
"category": "external",
"summary": "SUSE Bug 1177596 for CVE-2020-14360",
"url": "https://bugzilla.suse.com/1177596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14360"
},
{
"cve": "CVE-2020-14361",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14361"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14361",
"url": "https://www.suse.com/security/cve/CVE-2020-14361"
},
{
"category": "external",
"summary": "SUSE Bug 1174635 for CVE-2020-14361",
"url": "https://bugzilla.suse.com/1174635"
},
{
"category": "external",
"summary": "SUSE Bug 1174638 for CVE-2020-14361",
"url": "https://bugzilla.suse.com/1174638"
},
{
"category": "external",
"summary": "SUSE Bug 1174910 for CVE-2020-14361",
"url": "https://bugzilla.suse.com/1174910"
},
{
"category": "external",
"summary": "SUSE Bug 1174913 for CVE-2020-14361",
"url": "https://bugzilla.suse.com/1174913"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14361"
},
{
"cve": "CVE-2020-14362",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14362"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14362",
"url": "https://www.suse.com/security/cve/CVE-2020-14362"
},
{
"category": "external",
"summary": "SUSE Bug 1174635 for CVE-2020-14362",
"url": "https://bugzilla.suse.com/1174635"
},
{
"category": "external",
"summary": "SUSE Bug 1174638 for CVE-2020-14362",
"url": "https://bugzilla.suse.com/1174638"
},
{
"category": "external",
"summary": "SUSE Bug 1174910 for CVE-2020-14362",
"url": "https://bugzilla.suse.com/1174910"
},
{
"category": "external",
"summary": "SUSE Bug 1174913 for CVE-2020-14362",
"url": "https://bugzilla.suse.com/1174913"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14362"
},
{
"cve": "CVE-2020-25712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25712"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25712",
"url": "https://www.suse.com/security/cve/CVE-2020-25712"
},
{
"category": "external",
"summary": "SUSE Bug 1174908 for CVE-2020-25712",
"url": "https://bugzilla.suse.com/1174908"
},
{
"category": "external",
"summary": "SUSE Bug 1177596 for CVE-2020-25712",
"url": "https://bugzilla.suse.com/1177596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-25712"
},
{
"cve": "CVE-2021-3472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3472"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3472",
"url": "https://www.suse.com/security/cve/CVE-2021-3472"
},
{
"category": "external",
"summary": "SUSE Bug 1180128 for CVE-2021-3472",
"url": "https://bugzilla.suse.com/1180128"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-Xvfb-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-extra-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-sdk-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-source-1.20.13-1.2.x86_64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.aarch64",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.ppc64le",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.s390x",
"openSUSE Tumbleweed:xorg-x11-server-wrapper-1.20.13-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3472"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…