Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

An integer overflow, which led to a heap-based buffer overflow, was found in the way X.Org server handled trapezoids. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.
(CVE-2013-6424)

All xorg-x11-server users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

An integer overflow, which led to a heap-based buffer overflow, was found in the way X.Org server handled trapezoids. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.
(CVE-2013-6424)

Bryan Quigley discovered an integer underflow in the Xorg X server which could lead to denial of service or the execution of arbitrary code.

The remote host is affected by the vulnerability described in GLSA-201710-30 (X.Org Server: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org Server. Please       review the referenced CVE identifiers for details.
  Impact :

    A local attacker could cause a global buffer overflow or a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time

The X server was updated to fix a possible X server crash using invalid trapezoids. (bnc#853846 CVE-2013-6424)

Olivier Fourdan discovered that the X.Org X server incorrectly handled XkbSetGeometry requests resulting in an information leak. An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly obtain sensitive information. (CVE-2015-0255)

It was discovered that the X.Org X server incorrectly handled certain trapezoids. An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly crash the server. This issue only affected Ubuntu 12.04 LTS. (CVE-2013-6424).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated x11-server package fixes security vulnerability :

Bryan Quigley discovered an integer underflow in the Xorg X server which could lead to denial of service or the execution of arbitrary code (CVE-2013-6424).

From Red Hat Security Advisory 2013:1868 :

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

An integer overflow, which led to a heap-based buffer overflow, was found in the way X.Org server handled trapezoids. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.
(CVE-2013-6424)

All xorg-x11-server users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

This update fixes the following security issue with xorg-x11-server :

  - integer underflow when handling trapezoids     (CVE-2013-6424). (bnc#853846)

The remote host is affected by the vulnerability described in GLSA-201701-64 (X.Org X Server: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org X Server. Please       review the CVE identifiers referenced below for details.
  Impact :

    An authenticated attacker could possibly cause a Denial of Service       condition or read from or send information to arbitrary X11 clients.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
71612	RHEL 5 / 6 : xorg-x11-server (RHSA-2013:1868)	Nessus	Red Hat Local Security Checks	12/23/2013	1/14/2021	medium
72295	Amazon Linux AMI : xorg-x11-server (ALAS-2014-277)	Nessus	Amazon Linux Local Security Checks	2/5/2014	4/18/2018	medium
71527	Debian DSA-2822-1 : xorg-server - integer underflow	Nessus	Debian Local Security Checks	12/19/2013	1/11/2021	medium
71631	Scientific Linux Security Update : xorg-x11-server on SL5.x, SL6.x i386/x86_64 (20131220)	Nessus	Scientific Linux Local Security Checks	12/24/2013	1/14/2021	medium
104231	GLSA-201710-30 : X.Org Server: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	10/30/2017	1/11/2021	high
74877	openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1965-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	medium
81398	Ubuntu 14.04 LTS : X.Org X server vulnerabilities (USN-2500-1)	Nessus	Ubuntu Local Security Checks	2/18/2015	10/23/2023	high
72132	Mandriva Linux Security Advisory : x11-server (MDVSA-2014:020)	Nessus	Mandriva Local Security Checks	1/27/2014	1/6/2021	medium
71583	CentOS 5 / 6 : xorg-x11-server (CESA-2013:1868)	Nessus	CentOS Local Security Checks	12/23/2013	1/4/2021	medium
71610	Oracle Linux 5 / 6 : xorg-x11-server (ELSA-2013-1868)	Nessus	Oracle Linux Local Security Checks	12/23/2013	1/14/2021	medium
71937	SuSE 11.2 / 11.3 Security Update : xorg-x11-server (SAT Patch Numbers 8686 / 8687)	Nessus	SuSE Local Security Checks	1/14/2014	1/19/2021	medium
96786	GLSA-201701-64 : X.Org X Server: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/26/2017	1/11/2021	high

Detections

Analytics

Plugins Search

medium

medium

medium

medium

high

medium

high

medium

medium

medium

medium

high