The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2869 advisory.

    Jan-Niklas Sohn discovered that multiple input validation failures in X server extensions of the X.org X     server may result in privilege escalation if the X server is running privileged. For Debian 9 stretch,     these problems have been fixed in version 2:1.19.2-1+deb9u9. We recommend that you upgrade your xorg-     server packages. For the detailed security status of xorg-server please refer to its security tracker page     at: https://security-tracker.debian.org/tracker/xorg-server Further information about Debian LTS security     advisories, how to apply these updates to your system and frequently asked questions can be found at:
    https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0003 advisory.

    [1.20.4-17]
    - CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),       CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to     data confidentiality and integrity as well as system availability. (CVE-2021-4008)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2021-4009)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4010)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1917 advisory.

  - xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access (CVE-2021-4008)

  - xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access (CVE-2021-4009)

  - xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access (CVE-2021-4010)

  - xorg-x11-server: SwapCreateRegister out-of-bounds access (CVE-2021-4011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1917 advisory.

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to     data confidentiality and integrity as well as system availability. (CVE-2021-4008)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2021-4009)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4010)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the xorg-x11-server packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2021-4009)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4010)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.06, has xorg-x11-server packages installed that are affected by multiple vulnerabilities:

  - A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty     request has a length-validation issues, resulting in out-of-bounds memory reads and potential information     disclosure. This issue can lead to local privileges elevation on systems where the X server is running     privileged and remote code execution for ssh X forwarding sessions. (CVE-2022-46344)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4011)

  - A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames     function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2020-14345)

  - A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol     decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this     vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2020-14346)

  - A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server     memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in     possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable. (CVE-2020-14347)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202305-30 (X.Org X server, XWayland: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org X server, XWayland. Please review the CVE     identifiers referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
156392	Debian DLA-2869-1 : xorg-server - LTS security update	Nessus	Debian Local Security Checks	12/30/2021	1/24/2025	high
156459	Oracle Linux 7 : xorg-x11-server (ELSA-2022-0003)	Nessus	Oracle Linux Local Security Checks	1/4/2022	11/1/2024	high
158527	EulerOS 2.0 SP9 : xorg-x11-server (EulerOS-SA-2022-1314)	Nessus	Huawei Local Security Checks	3/2/2022	4/26/2022	high
160915	CentOS 8 : xorg-x11-server and xorg-x11-server-Xwayland (CESA-2022:1917)	Nessus	CentOS Local Security Checks	5/10/2022	5/10/2022	high
161102	AlmaLinux 8 : xorg-x11-server and xorg-x11-server-Xwayland (ALSA-2022:1917)	Nessus	Alma Linux Local Security Checks	5/12/2022	5/12/2022	high
165942	EulerOS Virtualization 3.0.6.0 : xorg-x11-server (EulerOS-SA-2022-2596)	Nessus	Huawei Local Security Checks	10/10/2022	10/10/2022	high
266275	NewStart CGSL MAIN 6.06 : xorg-x11-server Multiple Vulnerabilities (NS-SA-2025-0235)	Nessus	NewStart CGSL Local Security Checks	9/30/2025	9/30/2025	high
176467	GLSA-202305-30 : X.Org X server, XWayland: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	5/30/2023	9/24/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high