A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-selinuxUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-sourceUpgrade tigervnc-icons | Nov 7, 2024 | Oct 30, 2024 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Oct 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XdmxUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-module | Nov 18, 2024 | Oct 30, 2024 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-common | Feb 17, 2025 | Oct 29, 2024 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Oct 31, 2024 | Oct 31, 2024 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland | Nov 20, 2024 | Nov 19, 2024 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Nov 18, 2024 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jan 14, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jan 15, 2025 | Oct 30, 2024 |
| Oracle_linux | — | Upgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-appletUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-common | Nov 11, 2024 | Oct 29, 2024 |
| Redhat_linux | — | Upgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade tigervnc-server-appletUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-debugsourceUpgrade tigervncUpgrade tigervnc-serverUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-selinuxNo solution existsUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland | Nov 6, 2024 | Oct 30, 2024 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimal | Nov 19, 2024 | Oct 30, 2024 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xwaylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extraUpgrade xwayland-devel | Dec 31, 2024 | Oct 30, 2024 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland | Oct 31, 2024 | Oct 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub