A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade tigervnc-server-minimal | Jan 5, 2024 | Oct 25, 2023 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 22, 2024 | Oct 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xnest | Nov 16, 2023 | Oct 25, 2023 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 5, 2023 | Oct 25, 2023 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-common | Feb 17, 2025 | Oct 25, 2023 |
| Centos_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-XdmxUpgrade tigervnc-iconsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervnc-server-applet | Nov 9, 2023 | Oct 25, 2023 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Oct 27, 2023 | Oct 25, 2023 |
| Freebsd | — | Upgrade xorg-nestserverUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-vfbserverUpgrade xorg-serverUpgrade xephyr | Oct 26, 2023 | Oct 25, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Feb 1, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 13, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jan 29, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Feb 12, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 17, 2024 | Oct 25, 2023 |
| Oracle_linux | — | Upgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade tigervnc-server-appletUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinux | Nov 9, 2023 | Oct 25, 2023 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoNo solution existsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc | Nov 9, 2023 | Oct 25, 2023 |
| Suse | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extra | Oct 31, 2023 | Oct 25, 2023 |
| Ubuntu | — | Upgrade xwayland (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro) | Oct 26, 2023 | Oct 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub