PatchTheCVExfree86 project vulnerabilities
Recent CVEs affecting xfree86 project products. 36 tracked.
xfree86 project has 36 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-01-18. Highest priority: CVE-2004-0914 (score 64/100).
- CVE-2000-0976 MEDIUM 4.6 DOWNGRADE Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DI
- CVE-2007-5760 HIGH 9.3 UPGRADE MITIGATE Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attacke
- CVE-2007-1351 HIGH 8.5 MITIGATE DOWNGRADE Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2)
- CVE-2006-6103 MEDIUM 6.6 DOWNGRADE MITIGATE Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1,
- CVE-2006-6102 HIGH 10.0 DOWNGRADE MITIGATE Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.
- CVE-2006-6101 MEDIUM 6.6 DOWNGRADE MITIGATE Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and
- CVE-2006-3740 HIGH 7.2 DOWNGRADE MITIGATE Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execut
- CVE-2006-3739 HIGH 7.2 DOWNGRADE MITIGATE Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbi
- CVE-2005-2495 MEDIUM 5.1 DOWNGRADE Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via
- CVE-2005-0605 HIGH 7.5 DOWNGRADE DOWNGRADE scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to
- CVE-2004-0914 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) m
- CVE-2004-0688 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3)
- CVE-2004-0687 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and
- CVE-2004-0419 HIGH 7.5 DOWNGRADE DOWNGRADE XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remot
- CVE-2004-0106 HIGH 7.2 DOWNGRADE MITIGATE Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a diff
- CVE-2004-0094 HIGH 7.5 DOWNGRADE Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly ex
- CVE-2004-0093 HIGH 7.5 DOWNGRADE XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an
- CVE-2004-0084 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered f
- CVE-2004-0083 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote a
- CVE-2003-0730 HIGH 7.5 DOWNGRADE MITIGATE Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a
- CVE-2003-0071 LOW 2.1 DOWNGRADE The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers
- CVE-2003-0063 HIGH 7.3 DOWNGRADE The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a cer
- CVE-2002-1510 HIGH 10.0 MITIGATE xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the
- CVE-2002-1472 HIGH 7.2 DOWNGRADE Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows lo
- CVE-2002-1317 HIGH 7.5 DOWNGRADE MITIGATE Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote a
- CVE-2001-1409 LOW 3.6 DOWNGRADE dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allow
- CVE-2001-1179 HIGH 7.2 DOWNGRADE xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename cont
- CVE-2001-1178 HIGH 7.2 DOWNGRADE Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
- CVE-2001-1086 HIGH 7.5 DOWNGRADE XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the Ha
- CVE-2001-0955 HIGH 7.2 DOWNGRADE Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows atta
- CVE-2000-1060 MEDIUM 4.6 DOWNGRADE The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + loca
- CVE-2000-0620 MEDIUM 5.0 DOWNGRADE DOWNGRADE libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes l
- CVE-2000-0504 MEDIUM 5.0 DOWNGRADE DOWNGRADE libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is no
- CVE-2000-0476 MEDIUM 5.0 DOWNGRADE DOWNGRADE xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters w
- CVE-2000-0453 MEDIUM 5.0 DOWNGRADE XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed T
- CVE-2000-0285 HIGH 7.2 DOWNGRADE Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter
FAQ
How do I fix xfree86 project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xfree86 project being exploited right now?
None of the tracked xfree86 project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xfree86 project CVE should I patch first?
CVE-2004-0914 currently ranks highest (64/100): Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) m.