xorg-x11-server (SUSE:OpenStack Cloud 9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:OpenStack Cloud 9 package xorg-x11-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (23)

• CVE-2022-46343 — CVSS 8.8 (high): A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to…
• CVE-2022-46342 — CVSS 8.8 (high): A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory…
• CVE-2022-46344 — CVSS 8.8 (high): A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation…
• CVE-2022-46340 — CVSS 8.8 (high): A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest…
• CVE-2022-46341 — CVSS 8.8 (high): A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds…
• CVE-2020-25712 — CVSS 7.8 (high): A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation…
• CVE-2021-3472 — CVSS 7.8 (high): A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local…
• CVE-2021-4008 — CVSS 7.8 (high): A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the…
• CVE-2021-4009 — CVSS 7.8 (high): A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the…
• CVE-2021-4011 — CVSS 7.8 (high): A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the…
• CVE-2022-2319 — CVSS 7.8 (high): A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper…
• CVE-2022-2320 — CVSS 7.8 (high): A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results…
• CVE-2022-4283 — CVSS 7.8 (high): A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory…
• CVE-2023-1393 — CVSS 7.8 (high): A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys…
• CVE-2020-14346 — CVSS 7.8 (high): A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead…
• CVE-2020-14360 — CVSS 7.8 (high): A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege…
• CVE-2020-14361 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a…
• CVE-2020-14362 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a…
• CVE-2023-0494 — CVSS 7.8 (high): A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by…
• CVE-2020-14345 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege…
• CVE-2020-14347 — CVSS 5.5 (medium): A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases…
• CVE-2022-3550 — CVSS 5.5 (medium): A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the…
• CVE-2022-3551 — CVSS 3.5 (low): A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function…