A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade tigervnc-selinuxUpgrade tigervncUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland | Nov 7, 2024 | Oct 30, 2024 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Oct 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade tigervnc-server | Nov 18, 2024 | Oct 30, 2024 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xnest | Feb 17, 2025 | Oct 29, 2024 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Oct 31, 2024 | Oct 31, 2024 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-server | Nov 20, 2024 | Nov 19, 2024 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Nov 18, 2024 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jan 14, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jan 15, 2025 | Oct 30, 2024 |
| Oracle_linux | — | Upgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade tigervnc-server-appletUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-server | Nov 11, 2024 | Oct 29, 2024 |
| Redhat_linux | — | Upgrade tigervncUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoNo solution existsUpgrade tigervnc-serverUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade tigervnc-debugsourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-common | Nov 6, 2024 | Oct 30, 2024 |
| Rocky_linux | — | Upgrade tigervnc-server-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervncUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-devel | Nov 19, 2024 | Oct 30, 2024 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-extraUpgrade xwayland-develUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xwayland | Dec 31, 2024 | Oct 30, 2024 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro) | Oct 31, 2024 | Oct 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub