X.org Xorg-Server vulnerabilities

3 CVEs affecting X.org Xorg-Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3164, published 2015-07-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-4730, published 2007-09-11. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large…
CVE-2006-4447, published 2006-08-30. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow…
CVE-2015-3164, published 2015-07-01. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients…