{"id":102614,"date":"2021-12-14T21:36:46","date_gmt":"2021-12-14T19:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-x-org-server"},"modified":"2021-12-14T21:36:46","modified_gmt":"2021-12-14T19:36:46","slug":"uyazvimosti-v-x-org-server","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimosti-v-x-org-server","title":{"rendered":"S\u00e5rbarheder i X.Org Server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Der er identificeret fire s\u00e5rbarheder i X.Org Server, som giver mulighed for at opn\u00e5 h\u00f8jere privilegier i systemet, hvis X-serveren k\u00f8rer med root-rettigheder, eller for at udf\u00f8re kode p\u00e5 et fjernt system, hvis adgangen sker via X11-session-omdirigering via SSH. Problemerne forventes at blive l\u00f8st i udgivelsen xorg-server 21.1.2, som forventes at komme i de kommende dage. I distributionssystemerne forbliver problemerne dog ubehandlede (Debian, Ubuntu, RHEL, SUSE, Fedora, Arch). <\/p>\n
\n
CVE-2021-4008 \u2014 buffer overflow in the SProcRenderCompositeGlyphs function due to inadequate length checking of the data sent by the CompositeGlyphs request handler in the Render extension, which can be exploited to write arbitrary data outside the buffer. A patch is available.\n
CVE-2021-4009 buffer-overl\u00f8b i funktionen SProcXFixesCreatePointerBarrier, for\u00e5rsaget af utilstr\u00e6kkelig l\u00e6ngdekontrol af anmodningen i handleren CreatePointerBarrier, der anvendes i XFixes-udvidelsen. Patch til reparation.\n
CVE-2021-4010 \u2014 buffer overflow in the SProcScreenSaverSuspend function due to inadequate length checking of the Suspend request in the Screen Saver extension. A patch is available.\n
CVE-2021-4011 \u2014 buffer overflow in the SwapCreateRegister function due to inadequate length checking of the RecordCreateContext and RecordRegisterClients requests in the Record extension. A patch is available. <\/ul>\n