A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade tigervnc | Jan 5, 2024 | Dec 13, 2023 |
| Alpine Linux | — | Upgrade xorg-server | Aug 22, 2024 | Dec 13, 2023 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-source | Jan 10, 2024 | Dec 13, 2023 |
| Amazon_linux | — | Upgrade xorg-x11-server | Jan 9, 2024 | Dec 13, 2023 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debugsource | Feb 17, 2025 | Dec 13, 2023 |
| Centos_linux | — | Upgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg | Jan 3, 2024 | Dec 13, 2023 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Dec 19, 2023 | Dec 13, 2023 |
| Freebsd | — | Upgrade xorg-serverUpgrade xorg-vfbserverUpgrade xephyrUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-nestserver | Dec 13, 2023 | Dec 13, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Feb 1, 2024 | Dec 13, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Mar 13, 2024 | Dec 13, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Mar 13, 2024 | Dec 13, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | May 31, 2024 | Dec 13, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Dec 13, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 12, 2024 | Dec 13, 2023 |
| Oracle_linux | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-selinuxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc | Jan 3, 2024 | Dec 13, 2023 |
| Redhat_linux | — | Upgrade tigervnc-iconsUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-debuginfoNo solution existsUpgrade xorg-x11-server-Xvfb | Dec 21, 2023 | Dec 13, 2023 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xwayland-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-source | Dec 14, 2023 | Dec 13, 2023 |
| Ubuntu | — | Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core | Dec 14, 2023 | Dec 13, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub