A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XdmxUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-devel | Nov 7, 2024 | Oct 30, 2024 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Oct 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade tigervnc-license | Nov 18, 2024 | Oct 30, 2024 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xorg-debuginfo | Feb 17, 2025 | Oct 29, 2024 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Oct 31, 2024 | Oct 31, 2024 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-server | Nov 20, 2024 | Nov 19, 2024 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Nov 18, 2024 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jan 14, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jan 15, 2025 | Oct 30, 2024 |
| Oracle_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-source | Nov 11, 2024 | Oct 29, 2024 |
| Redhat_linux | — | Upgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-debuginfoNo solution existsUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-Xnest-debuginfo | Nov 6, 2024 | Oct 30, 2024 |
| Rocky_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-debugsourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimal-debuginfo | Nov 19, 2024 | Oct 30, 2024 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-extraUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server | Dec 31, 2024 | Oct 30, 2024 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland | Oct 31, 2024 | Oct 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub