A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade tigervnc-server-minimal | Jan 5, 2024 | Oct 25, 2023 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 22, 2024 | Oct 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xvfb | Nov 16, 2023 | Oct 25, 2023 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 5, 2023 | Oct 25, 2023 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg | Feb 17, 2025 | Oct 25, 2023 |
| Centos_linux | — | Upgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xorg | Nov 9, 2023 | Oct 25, 2023 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Oct 27, 2023 | Oct 25, 2023 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xwaylandUpgrade xorg-nestserverUpgrade xwayland-develUpgrade xephyrUpgrade xorg-server | Oct 26, 2023 | Oct 25, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Feb 1, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 13, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jan 29, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Feb 12, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 17, 2024 | Oct 25, 2023 |
| Oracle_linux | — | Upgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade tigervnc-server-module | Nov 9, 2023 | Oct 25, 2023 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-appletUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xnest-debuginfoNo solution existsUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-debugsource | Nov 9, 2023 | Oct 25, 2023 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xwayland-develUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-wayland | Oct 31, 2023 | Oct 25, 2023 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwaylandUpgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro) | Oct 26, 2023 | Oct 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub