PatchTheCVExserver vulnerabilities and fixes
Recent CVEs affecting xserver, with upgrade or downgrade steps. 7 tracked.
xserver has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2008-01-18. Highest priority: CVE-2007-5760 (score 55/100).
- CVE-2008-0006 HIGH 7.5 MITIGATE MITIGATE Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platform
- CVE-2007-6429 HIGH 9.3 MITIGATE MITIGATE Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrar
- CVE-2007-6428 MEDIUM 5.0 MITIGATE UPGRADE The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows cont
- CVE-2007-5958 MEDIUM 5.0 UPGRADE X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename arg
- CVE-2007-5760 HIGH 9.3 UPGRADE MITIGATE Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attacke
- CVE-2007-3957 MEDIUM 5.0 DOWNGRADE Buffer overflow in Nipun Jain xserver 0.1 alpha allows remote attackers to cause a denial of service via a POS
- CVE-2007-2437 MEDIUM 5.5 DOWNGRADE UPGRADE The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, a
FAQ
How do I fix xserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xserver being exploited right now?
None of the tracked xserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xserver CVE should I patch first?
CVE-2007-5760 currently ranks highest (55/100): Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attacke.