The remote Solaris system is missing necessary patches to address security updates :

  - Integer overflow in X.org libXfixes 5.0 and earlier     allows X servers to trigger allocation of insufficient     memory and a buffer overflow via vectors related to the     XFixesGetCursorImage function. (CVE-2013-1983)

  - Multiple integer overflows in X.org libXrandr 1.4.0 and     earlier allow X servers to trigger allocation of     insufficient memory and a buffer overflow via vectors     related to the (1) XRRQueryOutputProperty and (2)     XRRQueryProviderProperty functions. (CVE-2013-1986)

  - Multiple integer overflows in X.org libXrender 0.9.7 and     earlier allow X servers to trigger allocation of     insufficient memory and a buffer overflow via vectors     related to the (1) XRenderQueryFilters, (2)     XRenderQueryFormats, and (3) XRenderQueryPictIndexValues     functions. (CVE-2013-1987)

  - Multiple integer overflows in X.org libXRes 1.0.6 and     earlier allow X servers to trigger allocation of     insufficient memory and a buffer overflow via vectors     related to the (1) XResQueryClients and (2)     XResQueryClientResources functions. (CVE-2013-1988)

  - Multiple integer overflows in X.org libXv 1.0.7 and     earlier allow X servers to trigger allocation of     insufficient memory and a buffer overflow via vectors     related to the (1) XvQueryPortAttributes, (2)     XvListImageFormats, and (3) XvCreateImage function.
    (CVE-2013-1989)

  - Multiple integer overflows in X.org libXvMC 1.0.7 and     earlier allow X servers to trigger allocation of     insufficient memory and a buffer overflow via vectors     related to the (1) XvMCListSurfaceTypes and (2)     XvMCListSubpictureTypes functions. (CVE-2013-1990)

  - Multiple integer overflows in X.org libdmx 1.1.2 and     earlier allow X servers to trigger allocation of     insufficient memory and a buffer overflow via vectors     related to the (1) DMXGetScreenAttributes, (2)     DMXGetWindowAttributes, and (3) DMXGetInputAttributes     functions. (CVE-2013-1992)

  - Multiple integer overflows in X.org libGLX in Mesa 9.1.1     and earlier allow X servers to trigger allocation of     insufficient memory and a buffer overflow via vectors     related to the (1) XF86DRIOpenConnection and (2)     XF86DRIGetClientDriverName functions. (CVE-2013-1993)

  - Buffer overflow in X.org libXvMC 1.0.7 and earlier     allows X servers to cause a denial of service (crash)     and possibly execute arbitrary code via crafted length     or index values to the XvMCGetDRInfo function.
    (CVE-2013-1999)

  - Multiple buffer overflows in X.org libXxf86dga 1.1.3 and     earlier allow X servers to cause a denial of service     (crash) and possibly execute arbitrary code via crafted     length or index values to the (1) XDGAQueryModes and (2)     XDGASetMode functions. (CVE-2013-2000)

  - Buffer overflow in X.org libXxf86vm 1.1.2 and earlier     allows X servers to cause a denial of service (crash)     and possibly execute arbitrary code via crafted length     or index values to the XF86VidModeGetGammaRamp function.
    (CVE-2013-2001)

  - Integer overflow in X.org libXcursor 1.1.13 and earlier     allows X servers to trigger allocation of insufficient     memory and a buffer overflow via vectors related to the
    _XcursorFileHeaderCreate function. (CVE-2013-2003)

  - Integer overflow in X.org libXtst 1.2.1 and earlier     allows X servers to trigger allocation of insufficient     memory and a buffer overflow via vectors related to the     XRecordGetContext function. (CVE-2013-2063)

  - Integer overflow in X.org libxcb 1.9 and earlier allows     X servers to trigger allocation of insufficient memory     and a buffer overflow via vectors related to the     read_packet function. (CVE-2013-2064)

  - Buffer overflow in X.org libXv 1.0.7 and earlier allows     X servers to cause a denial of service (crash) and     possibly execute arbitrary code via crafted length or     index values to the XvQueryPortAttributes function.
    (CVE-2013-2066)

freedesktop.org reports :

Ilja van Sprundel, a security researcher with IOActive, has discovered a large number of issues in the way various X client libraries handle the responses they receive from servers, and has worked with X.Org's security team to analyze, confirm, and fix these issues.

Most of these issues stem from the client libraries trusting the server to send correct protocol data, and not verifying that the values will not overflow or cause other damage. Most of the time X clients & servers are run by the same user, with the server more privileged from the clients, so this is not a problem, but there are scenarios in which a privileged client can be connected to an unprivileged server, for instance, connecting a setuid X client (such as a screen lock program) to a virtual X server (such as Xvfb or Xephyr) which the user has modified to return invalid data, potentially allowing the user to escalate their privileges.

The vulnerabilities include :

Integer overflows calculating memory needs for replies.

Sign extension issues calculating memory needs for replies.

Buffer overflows due to not validating length or offset values in replies.

Integer overflows parsing user-specified files.

Unbounded recursion parsing user-specified files.

Memory corruption due to unchecked return values.

Ilja van Sprundel discovered multiple security issues in various X.org libraries and components. An attacker could use these issues to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of libdmx fixes several integer overflow issues.

  -     U_0001-integer-overflow-in-DMXGetScreenAttributes-CVE-20     13-.patch,     U_0002-integer-overflow-in-DMXGetWindowAttributes-CVE-20     13-.patch,     U_0003-integer-overflow-in-DMXGetInputAttributes-CVE-201     3-1.patch,

  - integer overflow in DMXGetScreenAttributes(),     DMXGetWindowAttributes(), DMXGetInputAttributes()     [CVE-2013-1992] (bnc#821663, bnc#815451)

Update to latest git to fix the following CVEs: CVE-2013-1992

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of xorg-x11-libs fixes several integer and buffer overflow issues. (bnc#815451, bnc#821663)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
80819	Oracle Solaris Third-Party Patch Update : xorg (multiple_vulnerabilities_in_x_org)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	medium
66798	FreeBSD : xorg -- protocol handling issues in X Window System client libraries (2eebebff-cd3b-11e2-8f09-001b38c3836c)	Nessus	FreeBSD Local Security Checks	2013/6/5	2021/1/6	medium
66816	Ubuntu 12.04 LTS / 12.10 / 13.04 : libdmx vulnerability (USN-1852-1)	Nessus	Ubuntu Local Security Checks	2013/6/6	2019/9/19	medium
75046	openSUSE Security Update : libdmx (openSUSE-SU-2013:1029-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
66745	Fedora 18 : libdmx-1.1.2-4.20130524git5074d9d64.fc18 (2013-9115)	Nessus	Fedora Local Security Checks	2013/6/3	2021/1/11	medium
67106	SuSE 11.2 Security Update : xorg-x11-libs (SAT Patch Number 7846)	Nessus	SuSE Local Security Checks	2013/6/29	2021/1/19	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium