x11r6 vulnerabilities and fixes

Recent CVEs affecting x11r6, with upgrade or downgrade steps. 30 tracked.

x11r6 has 30 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-04-06. Highest priority: CVE-2004-0914 (score 64/100).

• CVE-2007-1351 HIGH 8.5 MITIGATE DOWNGRADE Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2)
• CVE-2006-4447 HIGH 7.2 DOWNGRADE DOWNGRADE X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return
• CVE-2006-1526 LOW 2.1 DOWNGRADE Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a
• CVE-2006-0745 HIGH 7.2 DOWNGRADE DOWNGRADE X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the get
• CVE-2005-0605 HIGH 7.5 DOWNGRADE DOWNGRADE scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to
• CVE-2004-0914 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) m
• CVE-2004-0688 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3)
• CVE-2004-0687 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and
• CVE-2004-0419 HIGH 7.5 DOWNGRADE DOWNGRADE XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remot
• CVE-2004-0106 HIGH 7.2 DOWNGRADE MITIGATE Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a diff
• CVE-2004-0094 HIGH 7.5 DOWNGRADE Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly ex
• CVE-2004-0093 HIGH 7.5 DOWNGRADE XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an
• CVE-2004-0084 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered f
• CVE-2004-0083 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote a
• CVE-2003-0730 HIGH 7.5 DOWNGRADE MITIGATE Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a
• CVE-2003-0071 LOW 2.1 DOWNGRADE The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers
• CVE-2003-0063 HIGH 7.3 DOWNGRADE The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a cer
• CVE-2002-1510 HIGH 10.0 MITIGATE xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the
• CVE-2002-1472 HIGH 7.2 DOWNGRADE Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows lo
• CVE-2002-1317 HIGH 7.5 DOWNGRADE MITIGATE Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote a
• CVE-2001-1179 HIGH 7.2 DOWNGRADE xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename cont
• CVE-2001-1178 HIGH 7.2 DOWNGRADE Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
• CVE-2001-1086 HIGH 7.5 DOWNGRADE XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the Ha
• CVE-2001-0955 HIGH 7.2 DOWNGRADE Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows atta
• CVE-2000-0620 MEDIUM 5.0 DOWNGRADE DOWNGRADE libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes l
• CVE-2000-0504 MEDIUM 5.0 DOWNGRADE DOWNGRADE libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is no
• CVE-2000-0476 MEDIUM 5.0 DOWNGRADE DOWNGRADE xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters w
• CVE-2000-0453 MEDIUM 5.0 DOWNGRADE XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed T
• CVE-2000-0285 HIGH 7.2 DOWNGRADE Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter
• CVE-1999-0433 MEDIUM 4.6 DOWNGRADE MITIGATE XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted d

FAQ

How do I fix x11r6 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is x11r6 being exploited right now?

None of the tracked x11r6 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which x11r6 CVE should I patch first?

CVE-2004-0914 currently ranks highest (64/100): Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) m.

RSS feed for x11r6 · ← Back to latest CVEs