ALT Linux Team

Package xorg-server update in c10f2 on 2024-11-13

ALT-PU-2024-15359-3

Package xorg-server updated to version 1.20.14-alt14 for branch c10f2 in task 362202.

Closed vulnerabilities

Published: 2024-10-08

BDU:2024-09084

Уязвимость функции _XkbSetCompatMap реализации сервера X Window System X.Org Server, позволяющая нарушителю повысить свои привилегии

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2024-10-30
Modified: 2024-11-21

CVE-2024-9632

A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.

References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top