CVE-2024-9632
Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
Summary
Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
Original description
The description as published by the source.
A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- BellSoft Alpaquita BELL-CVE-2024-9632 xorg-server Fixed in: 21.1.14-r0
- Debian DEBIAN-CVE-2024-9632 xorg-server Fixed in: 2:1.20.11-1+deb11u14
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package gitlab.freedesktop.org
- report bugzilla.redhat.com
- web seclists.org
- web openwall.com
- web access.redhat.com
- web lists.debian.org