ALT Linux Team

Package xorg-xwayland update in c10f1 on 2024-11-15

ALT-PU-2024-15502-2

Package xorg-xwayland updated to version 23.1.1-alt6 for branch c10f1 in task 362451.

Closed vulnerabilities

Published: 2024-10-08

BDU:2024-09084

Уязвимость функции _XkbSetCompatMap реализации сервера X Window System X.Org Server, позволяющая нарушителю повысить свои привилегии

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2024-10-30
Modified: 2024-11-21

CVE-2024-9632

A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.

References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top