The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinuxUpgrade tigervnc-server-minimalUpgrade tigervnc-server | Feb 1, 2024 | Jan 18, 2024 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 22, 2024 | Jan 18, 2024 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xorg | Feb 21, 2024 | Jan 18, 2024 |
| Amazon_linux | — | Upgrade xorg-x11-server | Apr 29, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfo | Feb 17, 2025 | Jan 16, 2024 |
| Centos_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimal | Jan 23, 2024 | Jan 18, 2024 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Jan 29, 2024 | Jan 18, 2024 |
| Freebsd | — | Upgrade xwayland-develUpgrade xorg-nextserverUpgrade xorg-vfbserverUpgrade xorg-serverUpgrade xephyrUpgrade xwayland | Dec 10, 2025 | Jan 16, 2024 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Feb 1, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Jul 24, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade tigervnc-licenseUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-applet | Jan 23, 2024 | Jan 16, 2024 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-debugsourceUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debugsourceNo solution existsUpgrade tigervnc-server-moduleUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xorg | Jan 29, 2024 | Jan 18, 2024 |
| Rocky_linux | — | — | Aug 15, 2024 | Jan 18, 2024 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xwaylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xwayland-develUpgrade xorg-x11-server-Xvfb | Jan 17, 2024 | Jan 17, 2024 |
| Ubuntu | — | Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro) | Jan 17, 2024 | Jan 16, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub