In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-server | Aug 22, 2024 | Oct 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 9, 2017 |
| Debian | — | Upgrade xorg-server | Oct 18, 2017 | Oct 9, 2017 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xorg-dmxUpgrade xorg-nestserverUpgrade xorg-vfbserverUpgrade xwayland | Oct 13, 2017 | Oct 9, 2017 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Oct 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade xorg-x11-server-common | Dec 4, 2017 | Oct 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Dec 4, 2017 | Oct 9, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xorg to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xvfb to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xvnc to version 1.1.0-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xephyr to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3 | Feb 6, 2018 | Oct 9, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 4, 2017 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-xvncUpgrade xorg-x11-server-extra | Nov 16, 2017 | Oct 9, 2017 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core-lts-xenialUpgrade xserver-xorg-core | Oct 12, 2017 | Oct 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub