In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-server | Aug 22, 2024 | Oct 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 9, 2017 |
| Debian | — | Upgrade xorg-server | Oct 18, 2017 | Oct 9, 2017 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xorg-nestserverUpgrade xorg-vfbserverUpgrade xwaylandUpgrade xorg-dmx | Oct 13, 2017 | Oct 9, 2017 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Oct 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade xorg-x11-server-common | Dec 4, 2017 | Oct 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Dec 4, 2017 | Oct 9, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xvfb to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xvnc to version 1.1.0-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xorg to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3 | Feb 6, 2018 | Oct 9, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 4, 2017 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-xvncUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdk | Nov 16, 2017 | Oct 9, 2017 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-lts-xenial | Oct 12, 2017 | Oct 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub