An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade tigervnc-selinuxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr | Feb 1, 2024 | Jan 30, 2024 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 22, 2024 | Feb 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-source | Feb 21, 2024 | Feb 9, 2024 |
| Amazon_linux | — | Upgrade xorg-x11-server | Apr 29, 2024 | Feb 9, 2024 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xorg | Feb 17, 2025 | Jan 16, 2024 |
| Centos_linux | — | Upgrade tigervnc-iconsUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-common | Jan 23, 2024 | Jan 22, 2024 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Jan 29, 2024 | Jan 29, 2024 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-serverUpgrade xephyrUpgrade xwaylandUpgrade xorg-nextserverUpgrade xwayland-devel | Dec 10, 2025 | Jan 16, 2024 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Feb 1, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Mar 13, 2024 | Feb 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Mar 13, 2024 | Feb 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | May 31, 2024 | Feb 9, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Oct 8, 2024 | Feb 9, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Jul 24, 2024 | Feb 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Apr 9, 2024 | Feb 9, 2024 |
| Oracle_linux | — | Upgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xnest | May 7, 2024 | Jan 16, 2024 |
| Redhat_linux | — | Upgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade tigervnc-server-appletNo solution existsUpgrade tigervnc-selinuxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade tigervncUpgrade tigervnc-server-debuginfo | Jan 29, 2024 | Jan 22, 2024 |
| Rocky_linux | — | — | Aug 15, 2024 | Feb 9, 2024 |
| Suse | — | Upgrade xwaylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-waylandUpgrade xwayland-devel | Jan 17, 2024 | Jan 17, 2024 |
| Ubuntu | — | Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwaylandUpgrade xserver-xorg-core (Ubuntu Pro) | Jan 17, 2024 | Jan 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub