In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-xorg-server | Aug 22, 2024 | Oct 9, 2017 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Oct 9, 2017 | |
| Debian | debian-upgrade-xorg-server | Oct 18, 2017 | Oct 9, 2017 | |
| Freebsd | freebsd-upgrade-package-xephyrfreebsd-upgrade-package-xorg-dmxfreebsd-upgrade-package-xorg-nestserverfreebsd-upgrade-package-xorg-serverfreebsd-upgrade-package-xorg-vfbserverfreebsd-upgrade-package-xwayland | Oct 13, 2017 | Oct 9, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-base-xorg-server | Oct 30, 2017 | Oct 9, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-xorg-x11-server-commonhuawei-euleros-2_0_sp1-upgrade-xorg-x11-server-xephyrhuawei-euleros-2_0_sp1-upgrade-xorg-x11-server-xorghuawei-euleros-2_0_sp1-upgrade-xorg-x11-server-xvfb | Dec 4, 2017 | Oct 9, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-xorg-x11-server-commonhuawei-euleros-2_0_sp2-upgrade-xorg-x11-server-xephyrhuawei-euleros-2_0_sp2-upgrade-xorg-x11-server-xorg | Dec 4, 2017 | Oct 9, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-x11-server-xephyr-1-14-5-0-175-3-28-0-2-1543oracle-solaris-11-3-upgrade-x11-server-xorg-1-14-5-0-175-3-28-0-2-1543oracle-solaris-11-3-upgrade-x11-server-xvfb-1-14-5-0-175-3-28-0-2-1543oracle-solaris-11-3-upgrade-x11-server-xvnc-1-1-0-0-175-3-28-0-2-1543 | Feb 6, 2018 | Oct 9, 2017 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Oct 4, 2017 | |
| Suse | — | suse-upgrade-xorg-x11-serversuse-upgrade-xorg-x11-server-extrasuse-upgrade-xorg-x11-server-sdksuse-upgrade-xorg-x11-server-waylandsuse-upgrade-xorg-x11-xvnc | Nov 16, 2017 | Oct 9, 2017 |
| Ubuntu | ubuntu-upgrade-xserver-xorg-coreubuntu-upgrade-xserver-xorg-core-hwe-16-04ubuntu-upgrade-xserver-xorg-core-lts-xenial | Oct 12, 2017 | Oct 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub