In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-server | Aug 22, 2024 | Oct 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 9, 2017 |
| Debian | — | Upgrade xorg-server | Oct 18, 2017 | Oct 9, 2017 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-nestserverUpgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xorg-serverUpgrade xephyr | Oct 13, 2017 | Oct 9, 2017 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Oct 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade xorg-x11-server-common | Dec 4, 2017 | Oct 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Dec 4, 2017 | Oct 9, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xvfb to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xvnc to version 1.1.0-0.175.3.28.0.2.1543 on Solaris 11.3Upgrade x11/server/xorg to version 1.14.5-0.175.3.28.0.2.1543 on Solaris 11.3 | Feb 6, 2018 | Oct 9, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 4, 2017 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-xvncUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-extra | Nov 16, 2017 | Oct 9, 2017 |
| Ubuntu | — | Upgrade xserver-xorg-core-lts-xenialUpgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 | Oct 12, 2017 | Oct 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub