A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-selinuxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg | Nov 7, 2024 | Oct 30, 2024 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Oct 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-licenseUpgrade tigervnc-server-applet | Nov 18, 2024 | Oct 30, 2024 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfo | Feb 17, 2025 | Oct 29, 2024 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Oct 31, 2024 | Oct 31, 2024 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland | Nov 20, 2024 | Nov 19, 2024 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Nov 18, 2024 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jan 14, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jan 15, 2025 | Oct 30, 2024 |
| Oracle_linux | — | Upgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-devel | Nov 11, 2024 | Oct 29, 2024 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xvfb-debuginfoNo solution existsUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-serverUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervncUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-licenseUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-debugsource | Nov 6, 2024 | Oct 30, 2024 |
| Rocky_linux | — | Upgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervncUpgrade xorg-x11-server-Xdmx-debuginfo | Nov 19, 2024 | Oct 30, 2024 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xwayland-develUpgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extraUpgrade xwayland | Dec 31, 2024 | Oct 30, 2024 |
| Ubuntu | — | Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xwayland-hwe-18.04 (Ubuntu Pro) | Oct 31, 2024 | Oct 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub