CVE-2024-9632
Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
Résumé
Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- BellSoft Alpaquita BELL-CVE-2024-9632 xorg-server Corrigé dans: 21.1.14-r0
- Debian DEBIAN-CVE-2024-9632 xorg-server Corrigé dans: 2:1.20.11-1+deb11u14
Références
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package gitlab.freedesktop.org
- report bugzilla.redhat.com
- web seclists.org
- web openwall.com
- web access.redhat.com
- web lists.debian.org