xorg-x11-server (SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS package xorg-x11-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (12)

• CVE-2023-6816 — CVSS 9.8 (critical): A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down…
• CVE-2022-46340 — CVSS 8.8 (high): A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest…
• CVE-2023-1393 — CVSS 7.8 (high): A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys…
• CVE-2023-5367 — CVSS 7.8 (high): A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when…
• CVE-2023-6377 — CVSS 7.8 (high): A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in…
• CVE-2024-21886 — CVSS 7.8 (high): A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in…
• CVE-2023-0494 — CVSS 7.8 (high): A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by…
• CVE-2024-0229 — CVSS 7.8 (high): An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is…
• CVE-2024-21885 — CVSS 7.8 (high): A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when…
• CVE-2023-6478 — CVSS 7.6 (high): A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer…
• CVE-2023-5574 — CVSS 7.0 (high): A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a…
• CVE-2023-5380 — CVSS 4.7 (medium): A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a…