CVE-2024-9632
Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
概要
Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- BellSoft Alpaquita BELL-CVE-2024-9632 xorg-server 修正版: 21.1.14-r0
- Debian DEBIAN-CVE-2024-9632 xorg-server 修正版: 2:1.20.11-1+deb11u14
参照URL
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package gitlab.freedesktop.org
- report bugzilla.redhat.com
- web seclists.org
- web openwall.com
- web access.redhat.com
- web lists.debian.org