debian/libxrandr vulnerabilities

Latest debian/libxrandr CVEs

Newest publication first

1. CVE-2016-7948 X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.

   Published 2016-12-13

   Critical·CVSS 9.8 EPSS 3.9%

   X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.

2. CVE-2016-7947 Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.

   Published 2016-12-13

   Critical·CVSS 9.8 EPSS 3.6%

   Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.

3. DLA-660-1 libxrandr - security update

   Published 2016-10-17

   Unknown

4. CVE-2013-1986 Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty...

   Published 2013-06-15

   Medium·CVSS 6.8 EPSS 1.8%

   Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.

5. DSA-2684-1 libxrandr - several

   Published 2013-05-23

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.