According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to     data confidentiality and integrity as well as system availability. (CVE-2021-4008)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2021-4009)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4010)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1917 advisory.

  - xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access (CVE-2021-4008)

  - xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access (CVE-2021-4009)

  - xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access (CVE-2021-4010)

  - xorg-x11-server: SwapCreateRegister out-of-bounds access (CVE-2021-4011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1917 advisory.

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to     data confidentiality and integrity as well as system availability. (CVE-2021-4008)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2021-4009)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4010)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the xorg-x11-server packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2021-4009)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4010)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.06, has xorg-x11-server packages installed that are affected by multiple vulnerabilities:

  - A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty     request has a length-validation issues, resulting in out-of-bounds memory reads and potential information     disclosure. This issue can lead to local privileges elevation on systems where the X server is running     privileged and remote code execution for ssh X forwarding sessions. (CVE-2022-46344)

  - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access     can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-4011)

  - A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames     function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2020-14345)

  - A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol     decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this     vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2020-14346)

  - A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server     memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in     possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable. (CVE-2020-14347)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202305-30 (X.Org X server, XWayland: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org X server, XWayland. Please review the CVE     identifiers referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
158527	EulerOS 2.0 SP9 : xorg-x11-server (EulerOS-SA-2022-1314)	Nessus	Huawei Local Security Checks	2022/3/2	2022/4/26	high
160915	CentOS 8 : xorg-x11-server and xorg-x11-server-Xwayland (CESA-2022:1917)	Nessus	CentOS Local Security Checks	2022/5/10	2022/5/10	high
161102	AlmaLinux 8 : xorg-x11-server and xorg-x11-server-Xwayland (ALSA-2022:1917)	Nessus	Alma Linux Local Security Checks	2022/5/12	2022/5/12	high
165942	EulerOS Virtualization 3.0.6.0 : xorg-x11-server (EulerOS-SA-2022-2596)	Nessus	Huawei Local Security Checks	2022/10/10	2022/10/10	high
266275	NewStart CGSL MAIN 6.06 : xorg-x11-server Multiple Vulnerabilities (NS-SA-2025-0235)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/9/30	high
176467	GLSA-202305-30 : X.Org X server, XWayland: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2023/5/30	2025/9/24	high

偵測

搜尋 Plugin

high

high

high

high

high

high