csaf_redhat - rhsa-2025:12751

rhsa-2025:12751

Vulnerability from csaf_redhat

Published

2025-08-04 16:35

Modified

2025-08-05 17:56

Summary

Red Hat Security Advisory: tigervnc security update

Notes

Topic

An update for tigervnc is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340) * xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341) * xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342) * xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343) * xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344) * xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494) * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393) * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885,ZDI-CAN-22744) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886,ZDI-CAN-22840) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229,ZDI-CAN-22678) * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083) * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tigervnc is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.\n\nSecurity Fix(es):\n\n* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)\n\n* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)\n\n* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)\n\n* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)\n\n* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)\n\n* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)\n\n* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)\n\n* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)\n\n* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)\n\n* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)\n\n* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885,ZDI-CAN-22744)\n\n* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886,ZDI-CAN-22840)\n\n* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229,ZDI-CAN-22678)\n\n* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)\n\n* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)\n\n* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)\n\n* xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)\n\n* xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:12751",
        "url": "https://access.redhat.com/errata/RHSA-2025:12751"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2151755",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151755"
      },
      {
        "category": "external",
        "summary": "2151756",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151756"
      },
      {
        "category": "external",
        "summary": "2151757",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151757"
      },
      {
        "category": "external",
        "summary": "2151758",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151758"
      },
      {
        "category": "external",
        "summary": "2151760",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151760"
      },
      {
        "category": "external",
        "summary": "2151761",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151761"
      },
      {
        "category": "external",
        "summary": "2165995",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"
      },
      {
        "category": "external",
        "summary": "2180288",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2180288"
      },
      {
        "category": "external",
        "summary": "2243091",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243091"
      },
      {
        "category": "external",
        "summary": "2253298",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253298"
      },
      {
        "category": "external",
        "summary": "2256540",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256540"
      },
      {
        "category": "external",
        "summary": "2256542",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256542"
      },
      {
        "category": "external",
        "summary": "2256690",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256690"
      },
      {
        "category": "external",
        "summary": "2257691",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257691"
      },
      {
        "category": "external",
        "summary": "2271997",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271997"
      },
      {
        "category": "external",
        "summary": "2271998",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271998"
      },
      {
        "category": "external",
        "summary": "2272000",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272000"
      },
      {
        "category": "external",
        "summary": "2317233",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2317233"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12751.json"
      }
    ],
    "title": "Red Hat Security Advisory: tigervnc security update",
    "tracking": {
      "current_release_date": "2025-08-05T17:56:30+00:00",
      "generator": {
        "date": "2025-08-05T17:56:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.6"
        }
      },
      "id": "RHSA-2025:12751",
      "initial_release_date": "2025-08-04T16:35:43+00:00",
      "revision_history": [
        {
          "date": "2025-08-04T16:35:43+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-04T16:35:43+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-08-05T17:56:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
                  "product_id": "6Server-ELS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_els:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
                  "product_id": "6Server-optional-ELS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_els:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.1.0-25.el6_10.13.src",
                "product": {
                  "name": "tigervnc-0:1.1.0-25.el6_10.13.src",
                  "product_id": "tigervnc-0:1.1.0-25.el6_10.13.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.1.0-25.el6_10.13?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.1.0-25.el6_10.13.x86_64",
                "product": {
                  "name": "tigervnc-0:1.1.0-25.el6_10.13.x86_64",
                  "product_id": "tigervnc-0:1.1.0-25.el6_10.13.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.1.0-25.el6_10.13?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
                "product": {
                  "name": "tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
                  "product_id": "tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server@1.1.0-25.el6_10.13?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
                "product": {
                  "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
                  "product_id": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debuginfo@1.1.0-25.el6_10.13?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
                "product": {
                  "name": "tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
                  "product_id": "tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module@1.1.0-25.el6_10.13?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.1.0-25.el6_10.13.s390x",
                "product": {
                  "name": "tigervnc-0:1.1.0-25.el6_10.13.s390x",
                  "product_id": "tigervnc-0:1.1.0-25.el6_10.13.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.1.0-25.el6_10.13?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
                "product": {
                  "name": "tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
                  "product_id": "tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server@1.1.0-25.el6_10.13?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
                "product": {
                  "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
                  "product_id": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debuginfo@1.1.0-25.el6_10.13?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.1.0-25.el6_10.13.i686",
                "product": {
                  "name": "tigervnc-0:1.1.0-25.el6_10.13.i686",
                  "product_id": "tigervnc-0:1.1.0-25.el6_10.13.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.1.0-25.el6_10.13?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.1.0-25.el6_10.13.i686",
                "product": {
                  "name": "tigervnc-server-0:1.1.0-25.el6_10.13.i686",
                  "product_id": "tigervnc-server-0:1.1.0-25.el6_10.13.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server@1.1.0-25.el6_10.13?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
                "product": {
                  "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
                  "product_id": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debuginfo@1.1.0-25.el6_10.13?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
                "product": {
                  "name": "tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
                  "product_id": "tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module@1.1.0-25.el6_10.13?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
                "product": {
                  "name": "tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
                  "product_id": "tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-applet@1.1.0-25.el6_10.13?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.1.0-25.el6_10.13.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686"
        },
        "product_reference": "tigervnc-0:1.1.0-25.el6_10.13.i686",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.1.0-25.el6_10.13.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x"
        },
        "product_reference": "tigervnc-0:1.1.0-25.el6_10.13.s390x",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.1.0-25.el6_10.13.src as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src"
        },
        "product_reference": "tigervnc-0:1.1.0-25.el6_10.13.src",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.1.0-25.el6_10.13.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64"
        },
        "product_reference": "tigervnc-0:1.1.0-25.el6_10.13.x86_64",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686"
        },
        "product_reference": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x"
        },
        "product_reference": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64"
        },
        "product_reference": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.1.0-25.el6_10.13.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686"
        },
        "product_reference": "tigervnc-server-0:1.1.0-25.el6_10.13.i686",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.1.0-25.el6_10.13.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x"
        },
        "product_reference": "tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.1.0-25.el6_10.13.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64"
        },
        "product_reference": "tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch"
        },
        "product_reference": "tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.1.0-25.el6_10.13.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686"
        },
        "product_reference": "tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
          "product_id": "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        },
        "product_reference": "tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
        "relates_to_product_reference": "6Server-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.1.0-25.el6_10.13.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686"
        },
        "product_reference": "tigervnc-0:1.1.0-25.el6_10.13.i686",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.1.0-25.el6_10.13.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x"
        },
        "product_reference": "tigervnc-0:1.1.0-25.el6_10.13.s390x",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.1.0-25.el6_10.13.src as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src"
        },
        "product_reference": "tigervnc-0:1.1.0-25.el6_10.13.src",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.1.0-25.el6_10.13.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64"
        },
        "product_reference": "tigervnc-0:1.1.0-25.el6_10.13.x86_64",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686"
        },
        "product_reference": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x"
        },
        "product_reference": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64"
        },
        "product_reference": "tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.1.0-25.el6_10.13.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686"
        },
        "product_reference": "tigervnc-server-0:1.1.0-25.el6_10.13.i686",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.1.0-25.el6_10.13.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x"
        },
        "product_reference": "tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.1.0-25.el6_10.13.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64"
        },
        "product_reference": "tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch"
        },
        "product_reference": "tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.1.0-25.el6_10.13.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686"
        },
        "product_reference": "tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
          "product_id": "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        },
        "product_reference": "tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
        "relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-4283",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2151761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in X.Org. This issue occurs because the XkbCopyNames function leaves a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: XkbGetKbdByName use-after-free",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-4283"
        },
        {
          "category": "external",
          "summary": "RHBZ#2151761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-4283",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-4283"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-4283",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4283"
        }
      ],
      "release_date": "2022-12-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: XkbGetKbdByName use-after-free"
    },
    {
      "cve": "CVE-2022-46340",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2022-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2151755"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in X.Org. The issue occurs due to the swap handler for the XTestFakeInput request of the XTest extension, possibly corrupting the stack if GenericEvents with lengths larger than 32 bytes are sent through the XTestFakeInput request. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where the client and server use the same byte order.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: XTestSwapFakeInput stack overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46340"
        },
        {
          "category": "external",
          "summary": "RHBZ#2151755",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151755"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46340",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46340"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46340",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46340"
        }
      ],
      "release_date": "2022-12-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: XTestSwapFakeInput stack overflow"
    },
    {
      "cve": "CVE-2022-46341",
      "discovery_date": "2022-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2151756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in X.Org. This issue occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: XIPassiveUngrab out-of-bounds access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46341"
        },
        {
          "category": "external",
          "summary": "RHBZ#2151756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46341",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46341"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46341",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46341"
        }
      ],
      "release_date": "2022-12-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: XIPassiveUngrab out-of-bounds access"
    },
    {
      "cve": "CVE-2022-46342",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2151757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: XvdiSelectVideoNotify use-after-free",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46342"
        },
        {
          "category": "external",
          "summary": "RHBZ#2151757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46342",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46342"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46342",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46342"
        }
      ],
      "release_date": "2022-12-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: XvdiSelectVideoNotify use-after-free"
    },
    {
      "cve": "CVE-2022-46343",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2151758"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in X.Org. This issue occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This flaw can lead to local privileges elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: ScreenSaverSetAttributes use-after-free",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46343"
        },
        {
          "category": "external",
          "summary": "RHBZ#2151758",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151758"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46343"
        }
      ],
      "release_date": "2022-12-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: ScreenSaverSetAttributes use-after-free"
    },
    {
      "cve": "CVE-2022-46344",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2022-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2151760"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in X.Org. The issue occurs because the handler for the XIChangeProperty request has a length-validation issue, resulting in out-of-bounds memory reads and potential information disclosure. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: XIChangeProperty out-of-bounds access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46344"
        },
        {
          "category": "external",
          "summary": "RHBZ#2151760",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151760"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46344",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46344"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46344",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46344"
        }
      ],
      "release_date": "2022-12-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: XIChangeProperty out-of-bounds access"
    },
    {
      "cve": "CVE-2023-0494",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-01-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2165995"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-0494"
        },
        {
          "category": "external",
          "summary": "RHBZ#2165995",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-0494",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-0494"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-0494",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0494"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-5v6x-2hpj-c37x",
          "url": "https://github.com/advisories/GHSA-5v6x-2hpj-c37x"
        }
      ],
      "release_date": "2023-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation"
    },
    {
      "cve": "CVE-2023-1393",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2180288"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in X.Org Server. This flaw occurs if a client explicitly destroys the compositor overlay window (aka COW), where Xserver leaves a dangling pointer to that window in the CompScreen structure, which will later trigger a use-after-free issue. The Overlay Window use-after-free issue can lead to a local privilege escalation vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9. Therefore, Red Hat Enterprise Linux 8 and 9 have been rated Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-1393"
        },
        {
          "category": "external",
          "summary": "RHBZ#2180288",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2180288"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-1393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-1393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-1393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1393"
        },
        {
          "category": "external",
          "summary": "https://lists.x.org/archives/xorg-announce/2023-March/003374.html",
          "url": "https://lists.x.org/archives/xorg-announce/2023-March/003374.html"
        }
      ],
      "release_date": "2023-03-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability"
    },
    {
      "cve": "CVE-2023-5367",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2023-10-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2243091"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-5367"
        },
        {
          "category": "external",
          "summary": "RHBZ#2243091",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243091"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-5367",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-5367"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-5367",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5367"
        },
        {
          "category": "external",
          "summary": "https://lists.x.org/archives/xorg-announce/2023-October/003430.html",
          "url": "https://lists.x.org/archives/xorg-announce/2023-October/003430.html"
        }
      ],
      "release_date": "2023-10-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Peter Hutterer"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2023-6478",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2023-11-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2253298"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-6478"
        },
        {
          "category": "external",
          "summary": "RHBZ#2253298",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253298"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-6478",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-6478"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6478",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6478"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/14f480010a93ff962fef66a16412fafff81ad632",
          "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/14f480010a93ff962fef66a16412fafff81ad632"
        },
        {
          "category": "external",
          "summary": "https://lists.x.org/archives/xorg-announce/2023-December/003435.html",
          "url": "https://lists.x.org/archives/xorg-announce/2023-December/003435.html"
        }
      ],
      "release_date": "2023-12-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "Trend Micro Zero Day Initiative"
        }
      ],
      "cve": "CVE-2023-6816",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2024-01-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2257691"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device\u0027s particular number of buttons, leading to a heap overflow if a bigger value was used.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-6816"
        },
        {
          "category": "external",
          "summary": "RHBZ#2257691",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257691"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-6816",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-6816"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6816",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6816"
        }
      ],
      "release_date": "2024-01-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "Trend Micro Zero Day Initiative",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2024-0229",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2024-01-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2256690"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-0229"
        },
        {
          "category": "external",
          "summary": "RHBZ#2256690",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256690"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0229",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-0229"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0229",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0229"
        }
      ],
      "release_date": "2024-01-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access"
    },
    {
      "cve": "CVE-2024-9632",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2024-10-08T13:37:25.514000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2317233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-9632"
        },
        {
          "category": "external",
          "summary": "RHBZ#2317233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2317233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-9632",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-9632"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-9632",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9632"
        }
      ],
      "release_date": "2024-10-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "Trend Micro Zero Day Initiative"
        }
      ],
      "cve": "CVE-2024-21885",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2024-01-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2256540"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-21885"
        },
        {
          "category": "external",
          "summary": "RHBZ#2256540",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256540"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21885",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-21885"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21885",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21885"
        }
      ],
      "release_date": "2024-01-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "Trend Micro Zero Day Initiative"
        }
      ],
      "cve": "CVE-2024-21886",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2024-01-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2256542"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: heap buffer overflow in DisableDevice",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-21886"
        },
        {
          "category": "external",
          "summary": "RHBZ#2256542",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256542"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21886",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-21886"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21886",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21886"
        }
      ],
      "release_date": "2024-01-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: heap buffer overflow in DisableDevice"
    },
    {
      "cve": "CVE-2024-31080",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "discovery_date": "2024-03-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271997"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap-based buffer over-read vulnerability was found in the X.org server\u0027s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker\u0027s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Xorg server is not configured to run with root privileges in Red Hat Enterprise Linux 8 and 9. Consequently, these versions have been assigned a Moderate severity rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-31080"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271997",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271997"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-31080",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-31080"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-31080",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31080"
        }
      ],
      "release_date": "2024-04-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents"
    },
    {
      "cve": "CVE-2024-31081",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "discovery_date": "2024-03-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271998"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap-based buffer over-read vulnerability was found in the X.org server\u0027s ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker\u0027s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-31081"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271998",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271998"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-31081",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-31081"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-31081",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31081"
        }
      ],
      "release_date": "2024-04-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice"
    },
    {
      "cve": "CVE-2024-31083",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2024-03-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2272000"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: Use-after-free in ProcRenderAddGlyphs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
          "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
          "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-31083"
        },
        {
          "category": "external",
          "summary": "RHBZ#2272000",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272000"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-31083",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-31083"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-31083",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31083"
        }
      ],
      "release_date": "2024-04-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-04T16:35:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.src",
            "6Server-optional-ELS.EXTENSION:tigervnc-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-debuginfo-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.s390x",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-0:1.1.0-25.el6_10.13.x86_64",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-applet-0:1.1.0-25.el6_10.13.noarch",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.i686",
            "6Server-optional-ELS.EXTENSION:tigervnc-server-module-0:1.1.0-25.el6_10.13.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: Use-after-free in ProcRenderAddGlyphs"
    }
  ]
}

CVE-2024-31083 (GCVE-0-2024-31083)

Vulnerability from cvelistv5

Published

2024-04-05 12:04

Modified

2025-08-04 21:06

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use After Free

Summary

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:1785	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2036	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2037	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2038	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2039	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2040	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2041	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2042	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2080	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2616	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3258	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3261	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3343	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9093	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9122	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-31083	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2272000	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

►

Version: 21.1.12

Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	Unaffected: 0:1.1.0-25.el6_10.13 < * cpe:/o:redhat:rhel_els:6
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-29.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-33.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-23.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-10.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-16.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.11 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.10 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-8.el9_4.3 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:23.2.7-1.el9 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-26.el9 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.11 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.8 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-31083",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-05T18:36:25.769082Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-20T14:32:44.924Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:46:04.596Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/04/03/13"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/04/12/10"
          },
          {
            "name": "RHSA-2024:1785",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1785"
          },
          {
            "name": "RHSA-2024:2036",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2036"
          },
          {
            "name": "RHSA-2024:2037",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2037"
          },
          {
            "name": "RHSA-2024:2038",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2038"
          },
          {
            "name": "RHSA-2024:2039",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2039"
          },
          {
            "name": "RHSA-2024:2040",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2040"
          },
          {
            "name": "RHSA-2024:2041",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2041"
          },
          {
            "name": "RHSA-2024:2042",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2042"
          },
          {
            "name": "RHSA-2024:2080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2080"
          },
          {
            "name": "RHSA-2024:2616",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2616"
          },
          {
            "name": "RHSA-2024:3258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3258"
          },
          {
            "name": "RHSA-2024:3261",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3261"
          },
          {
            "name": "RHSA-2024:3343",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3343"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-31083"
          },
          {
            "name": "RHBZ#2272000",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272000"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.freedesktop.org/xorg/xserver",
          "defaultStatus": "unaffected",
          "packageName": "xorg-x11-server",
          "versions": [
            {
              "status": "affected",
              "version": "21.1.12"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-29.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-33.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-23.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-10.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-16.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-8.el9_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.2.7-1.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-26.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-04-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:06:48.612Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:1785",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1785"
        },
        {
          "name": "RHSA-2024:2036",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2036"
        },
        {
          "name": "RHSA-2024:2037",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2037"
        },
        {
          "name": "RHSA-2024:2038",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2038"
        },
        {
          "name": "RHSA-2024:2039",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2039"
        },
        {
          "name": "RHSA-2024:2040",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2040"
        },
        {
          "name": "RHSA-2024:2041",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2041"
        },
        {
          "name": "RHSA-2024:2042",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2042"
        },
        {
          "name": "RHSA-2024:2080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2080"
        },
        {
          "name": "RHSA-2024:2616",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2616"
        },
        {
          "name": "RHSA-2024:3258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3258"
        },
        {
          "name": "RHSA-2024:3261",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3261"
        },
        {
          "name": "RHSA-2024:3343",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3343"
        },
        {
          "name": "RHSA-2024:9093",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9093"
        },
        {
          "name": "RHSA-2024:9122",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9122"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-31083"
        },
        {
          "name": "RHBZ#2272000",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272000"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-03-28T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-04-03T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: use-after-free in procrenderaddglyphs",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-416: Use After Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-31083",
    "datePublished": "2024-04-05T12:04:49.414Z",
    "dateReserved": "2024-03-28T02:56:55.575Z",
    "dateUpdated": "2025-08-04T21:06:48.612Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-31081 (GCVE-0-2024-31081)

Vulnerability from cvelistv5

Published

2024-04-04 13:48

Modified

2025-08-04 21:06

Severity ?

7.3 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE

CWE-126 - Buffer Over-read

Summary

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:1785	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2036	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2037	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2038	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2039	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2040	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2041	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2042	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2080	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2616	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3258	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3261	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3343	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9093	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9122	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-31081	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2271998	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

►

Version: 1.7.0

Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	Unaffected: 0:1.1.0-25.el6_10.13 < * cpe:/o:redhat:rhel_els:6
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-29.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-33.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-23.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-10.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-16.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.11 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.10 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-8.el9_4.3 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:23.2.7-1.el9 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-26.el9 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.11 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.8 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-31081",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-04T16:37:41.931286Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:22:25.941Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:46:04.378Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/04/03/13"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/04/12/10"
          },
          {
            "name": "RHSA-2024:1785",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1785"
          },
          {
            "name": "RHSA-2024:2036",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2036"
          },
          {
            "name": "RHSA-2024:2037",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2037"
          },
          {
            "name": "RHSA-2024:2038",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2038"
          },
          {
            "name": "RHSA-2024:2039",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2039"
          },
          {
            "name": "RHSA-2024:2040",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2040"
          },
          {
            "name": "RHSA-2024:2041",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2041"
          },
          {
            "name": "RHSA-2024:2042",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2042"
          },
          {
            "name": "RHSA-2024:2080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2080"
          },
          {
            "name": "RHSA-2024:2616",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2616"
          },
          {
            "name": "RHSA-2024:3258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3258"
          },
          {
            "name": "RHSA-2024:3261",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3261"
          },
          {
            "name": "RHSA-2024:3343",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3343"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-31081"
          },
          {
            "name": "RHBZ#2271998",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271998"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.freedesktop.org/xorg/xserver",
          "defaultStatus": "unaffected",
          "packageName": "xorg-server",
          "versions": [
            {
              "status": "affected",
              "version": "1.7.0"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-29.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-33.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-23.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-10.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-16.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-8.el9_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.2.7-1.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-26.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-04-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A heap-based buffer over-read vulnerability was found in the X.org server\u0027s ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker\u0027s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-126",
              "description": "Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:06:33.284Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:1785",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1785"
        },
        {
          "name": "RHSA-2024:2036",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2036"
        },
        {
          "name": "RHSA-2024:2037",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2037"
        },
        {
          "name": "RHSA-2024:2038",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2038"
        },
        {
          "name": "RHSA-2024:2039",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2039"
        },
        {
          "name": "RHSA-2024:2040",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2040"
        },
        {
          "name": "RHSA-2024:2041",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2041"
        },
        {
          "name": "RHSA-2024:2042",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2042"
        },
        {
          "name": "RHSA-2024:2080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2080"
        },
        {
          "name": "RHSA-2024:2616",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2616"
        },
        {
          "name": "RHSA-2024:3258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3258"
        },
        {
          "name": "RHSA-2024:3261",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3261"
        },
        {
          "name": "RHSA-2024:3343",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3343"
        },
        {
          "name": "RHSA-2024:9093",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9093"
        },
        {
          "name": "RHSA-2024:9122",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9122"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-31081"
        },
        {
          "name": "RHBZ#2271998",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271998"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-03-28T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-04-03T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-126: Buffer Over-read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-31081",
    "datePublished": "2024-04-04T13:48:12.848Z",
    "dateReserved": "2024-03-28T02:56:55.575Z",
    "dateUpdated": "2025-08-04T21:06:33.284Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-46342 (GCVE-0-2022-46342)

Vulnerability from cvelistv5

Published

2022-12-14 00:00

Modified

2025-04-22 15:21

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

use-after-free

Summary

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se

References

►

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=2151757
	https://access.redhat.com/security/cve/CVE-2022-46342
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/	vendor-advisory
	https://www.debian.org/security/2022/dsa-5304	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/	vendor-advisory
	https://security.gentoo.org/glsa/202305-30

Impacted products

	Vendor	Product	Version
	n/a	xorg-x11-server	Version: xorg-x11-server-1.20.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:31:46.114Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151757"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2022-46342"
          },
          {
            "name": "FEDORA-2022-c3a65f7c65",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
          },
          {
            "name": "FEDORA-2022-721a78b7e5",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
          },
          {
            "name": "DSA-5304",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5304"
          },
          {
            "name": "FEDORA-2022-dd3eb7e0a8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-30"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-46342",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-22T15:21:01.030665Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-22T15:21:21.802Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "xorg-x11-server-1.20.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "use-after-free",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T05:08:28.069Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151757"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2022-46342"
        },
        {
          "name": "FEDORA-2022-c3a65f7c65",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
        },
        {
          "name": "FEDORA-2022-721a78b7e5",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
        },
        {
          "name": "DSA-5304",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5304"
        },
        {
          "name": "FEDORA-2022-dd3eb7e0a8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-30"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-46342",
    "datePublished": "2022-12-14T00:00:00.000Z",
    "dateReserved": "2022-11-30T00:00:00.000Z",
    "dateUpdated": "2025-04-22T15:21:21.802Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-4283 (GCVE-0-2022-4283)

Vulnerability from cvelistv5

Published

2022-12-14 00:00

Modified

2025-04-14 18:13

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

use-after-free

Summary

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

References

►

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=2151761
	https://access.redhat.com/security/cve/CVE-2022-4283
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/	vendor-advisory
	https://www.debian.org/security/2022/dsa-5304	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/	vendor-advisory
	https://security.gentoo.org/glsa/202305-30

Impacted products

	Vendor	Product	Version
	n/a	xorg-x11-server	Version: xorg-x11-server-1.20.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:34:49.985Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151761"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2022-4283"
          },
          {
            "name": "FEDORA-2022-c3a65f7c65",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
          },
          {
            "name": "FEDORA-2022-721a78b7e5",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
          },
          {
            "name": "DSA-5304",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5304"
          },
          {
            "name": "FEDORA-2022-dd3eb7e0a8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-30"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-4283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T15:16:33.555711Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-14T18:13:03.382Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "xorg-x11-server-1.20.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "use-after-free",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T05:08:33.737Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151761"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2022-4283"
        },
        {
          "name": "FEDORA-2022-c3a65f7c65",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
        },
        {
          "name": "FEDORA-2022-721a78b7e5",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
        },
        {
          "name": "DSA-5304",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5304"
        },
        {
          "name": "FEDORA-2022-dd3eb7e0a8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-30"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-4283",
    "datePublished": "2022-12-14T00:00:00.000Z",
    "dateReserved": "2022-12-05T00:00:00.000Z",
    "dateUpdated": "2025-04-14T18:13:03.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21885 (GCVE-0-2024-21885)

Vulnerability from cvelistv5

Published

2024-02-28 12:11

Modified

2025-08-13 13:36

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Summary

A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:0320	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0557	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0558	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0597	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0607	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0614	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0617	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0621	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0626	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0629	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2169	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2170	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2995	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2996	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-21885	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2256540	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

►

Version: 0 ≤

		Version: 0 ≤
Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	Unaffected: 0:1.1.0-25.el6_10.13 < * cpe:/o:redhat:rhel_els:6
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-27.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-31.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.7 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-22.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-15.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.9 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.7 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-3.el9_3.6 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-24.el9 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:22.1.9-5.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.8 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.5 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21885",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-26T16:17:45.889071Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-13T13:36:52.093Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:35:33.394Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:0320",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0320"
          },
          {
            "name": "RHSA-2024:0557",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0557"
          },
          {
            "name": "RHSA-2024:0558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0558"
          },
          {
            "name": "RHSA-2024:0597",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0597"
          },
          {
            "name": "RHSA-2024:0607",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0607"
          },
          {
            "name": "RHSA-2024:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0614"
          },
          {
            "name": "RHSA-2024:0617",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0617"
          },
          {
            "name": "RHSA-2024:0621",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0621"
          },
          {
            "name": "RHSA-2024:0626",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0626"
          },
          {
            "name": "RHSA-2024:0629",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0629"
          },
          {
            "name": "RHSA-2024:2169",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2169"
          },
          {
            "name": "RHSA-2024:2170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2170"
          },
          {
            "name": "RHSA-2024:2995",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2995"
          },
          {
            "name": "RHSA-2024:2996",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2996"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-21885"
          },
          {
            "name": "RHBZ#2256540",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256540"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240503-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.freedesktop.org/xorg/xserver",
          "packageName": "xorg-server",
          "versions": [
            {
              "lessThan": "21.1.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "21.1.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://gitlab.freedesktop.org/xorg/xserver",
          "packageName": "xwayland",
          "versions": [
            {
              "lessThan": "23.2.4",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "23.2.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-27.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-31.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-22.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-15.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-3.el9_3.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-24.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:22.1.9-5.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Jan-Niklas Sohn (Trend Micro Zero Day Initiative) for reporting this issue."
        }
      ],
      "datePublic": "2024-01-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-05T17:55:21.803Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:0320",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0320"
        },
        {
          "name": "RHSA-2024:0557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0557"
        },
        {
          "name": "RHSA-2024:0558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0558"
        },
        {
          "name": "RHSA-2024:0597",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0597"
        },
        {
          "name": "RHSA-2024:0607",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0607"
        },
        {
          "name": "RHSA-2024:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0614"
        },
        {
          "name": "RHSA-2024:0617",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0617"
        },
        {
          "name": "RHSA-2024:0621",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0621"
        },
        {
          "name": "RHSA-2024:0626",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0626"
        },
        {
          "name": "RHSA-2024:0629",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0629"
        },
        {
          "name": "RHSA-2024:2169",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2169"
        },
        {
          "name": "RHSA-2024:2170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2170"
        },
        {
          "name": "RHSA-2024:2995",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2995"
        },
        {
          "name": "RHSA-2024:2996",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2996"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-21885"
        },
        {
          "name": "RHBZ#2256540",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256540"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-01-02T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-01-16T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-122: Heap-based Buffer Overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-21885",
    "datePublished": "2024-02-28T12:11:59.650Z",
    "dateReserved": "2024-01-02T21:57:08.796Z",
    "dateUpdated": "2025-08-13T13:36:52.093Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5367 (GCVE-0-2023-5367)

Vulnerability from cvelistv5

Published

2023-10-25 19:46

Modified

2025-08-04 21:03

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Summary

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2023:6802	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2023:6808	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2023:7373	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2023:7388	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2023:7405	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2023:7428	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2023:7436	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2023:7526	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2023:7533	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0010	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0128	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2169	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2170	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2995	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2996	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2023-5367	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2243091	issue-tracking, x_refsource_REDHAT
	https://lists.x.org/archives/xorg-announce/2023-October/003430.html

Impacted products

Vendor

Product

Version

►

Red Hat

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION

Unaffected: 0:1.1.0-25.el6_10.13 < *
cpe:/o:redhat:rhel_els:6

Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-24.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-26.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.1 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-22.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-15.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	Unaffected: 0:1.9.0-16.el8_1.4 < * cpe:/a:redhat:rhel_e4s:8.1::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.4 < * cpe:/a:redhat:rhel_aus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.4 < * cpe:/a:redhat:rhel_aus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.4 < * cpe:/a:redhat:rhel_aus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.3 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.3 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.3 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.4 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.1 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-3.el9_3.3 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-24.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:22.1.9-5.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.3 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:59:43.957Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2023:6802",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:6802"
          },
          {
            "name": "RHSA-2023:6808",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:6808"
          },
          {
            "name": "RHSA-2023:7373",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7373"
          },
          {
            "name": "RHSA-2023:7388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7388"
          },
          {
            "name": "RHSA-2023:7405",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7405"
          },
          {
            "name": "RHSA-2023:7428",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7428"
          },
          {
            "name": "RHSA-2023:7436",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7436"
          },
          {
            "name": "RHSA-2023:7526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7526"
          },
          {
            "name": "RHSA-2023:7533",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7533"
          },
          {
            "name": "RHSA-2024:0010",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0010"
          },
          {
            "name": "RHSA-2024:0128",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0128"
          },
          {
            "name": "RHSA-2024:2169",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2169"
          },
          {
            "name": "RHSA-2024:2170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2170"
          },
          {
            "name": "RHSA-2024:2995",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2995"
          },
          {
            "name": "RHSA-2024:2996",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2996"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-5367"
          },
          {
            "name": "RHBZ#2243091",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243091"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WS5E7H4A5J3U5YBCTMRPQVGWK5LVH7D/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3RK66CXMXO3PCPDU3GDY5FK4UYHUXQJT/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YBK3I6SETHETBHDETFWM3VSZUQICIDV/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AKKIE626TZOOPD533EYN47J4RFNHZVOP/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO2Q2NP6R62ZRQQG3XQ4AXUT7J2EKKKY/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L2RMNR4235YXZZQ2X7Q4MTOZDMZ7BBQU/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEDJN4VFN57K5POOC7BNVD6L6WUUCSG6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SN6KV4XGQJRVAOSM5C3CWMVAXO53COIP/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJXNI4BXURC2BKPNAHFJK3C5ZETB7PER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.x.org/archives/xorg-announce/2023-October/003430.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-30"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231130-0004/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5534"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-24.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-26.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-22.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-15.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.1::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-16.el8_1.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-3.el9_3.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-24.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:22.1.9-5.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-10-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:03:24.990Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2023:6802",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:6802"
        },
        {
          "name": "RHSA-2023:6808",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:6808"
        },
        {
          "name": "RHSA-2023:7373",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7373"
        },
        {
          "name": "RHSA-2023:7388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7388"
        },
        {
          "name": "RHSA-2023:7405",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7405"
        },
        {
          "name": "RHSA-2023:7428",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7428"
        },
        {
          "name": "RHSA-2023:7436",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7436"
        },
        {
          "name": "RHSA-2023:7526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7526"
        },
        {
          "name": "RHSA-2023:7533",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7533"
        },
        {
          "name": "RHSA-2024:0010",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0010"
        },
        {
          "name": "RHSA-2024:0128",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0128"
        },
        {
          "name": "RHSA-2024:2169",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2169"
        },
        {
          "name": "RHSA-2024:2170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2170"
        },
        {
          "name": "RHSA-2024:2995",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2995"
        },
        {
          "name": "RHSA-2024:2996",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2996"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-5367"
        },
        {
          "name": "RHBZ#2243091",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243091"
        },
        {
          "url": "https://lists.x.org/archives/xorg-announce/2023-October/003430.html"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-10-03T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-10-25T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-787: Out-of-bounds Write"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-5367",
    "datePublished": "2023-10-25T19:46:58.494Z",
    "dateReserved": "2023-10-03T19:20:29.874Z",
    "dateUpdated": "2025-08-04T21:03:24.990Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-1393 (GCVE-0-2023-1393)

Vulnerability from cvelistv5

Published

2023-03-30 00:00

Modified

2025-02-14 15:43

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416

Summary

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.

References

►

URL

Tags

	https://www.openwall.com/lists/oss-security/2023/03/29/1
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/	vendor-advisory
	https://security.gentoo.org/glsa/202305-30	vendor-advisory
	https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110

Impacted products

	Vendor	Product	Version
	n/a	xorg-server	Version: xorg-server 21.1.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:49:11.396Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2023/03/29/1"
          },
          {
            "name": "FEDORA-2023-eb3c27ff25",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/"
          },
          {
            "name": "FEDORA-2023-b7835960ac",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/"
          },
          {
            "name": "FEDORA-2023-b87fd3a628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/"
          },
          {
            "name": "FEDORA-2023-f754e7abfd",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/"
          },
          {
            "name": "FEDORA-2023-66d5af0278",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/"
          },
          {
            "name": "FEDORA-2023-239bae4b57",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/"
          },
          {
            "name": "FEDORA-2023-fe18ae3e85",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/"
          },
          {
            "name": "FEDORA-2023-6f3f9ee721",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/"
          },
          {
            "name": "GLSA-202305-30",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-30"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-1393",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-14T15:42:21.872415Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-14T15:43:04.174Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-server",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "xorg-server 21.1.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-23T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://www.openwall.com/lists/oss-security/2023/03/29/1"
        },
        {
          "name": "FEDORA-2023-eb3c27ff25",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/"
        },
        {
          "name": "FEDORA-2023-b7835960ac",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/"
        },
        {
          "name": "FEDORA-2023-b87fd3a628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/"
        },
        {
          "name": "FEDORA-2023-f754e7abfd",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/"
        },
        {
          "name": "FEDORA-2023-66d5af0278",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/"
        },
        {
          "name": "FEDORA-2023-239bae4b57",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/"
        },
        {
          "name": "FEDORA-2023-fe18ae3e85",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/"
        },
        {
          "name": "FEDORA-2023-6f3f9ee721",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/"
        },
        {
          "name": "GLSA-202305-30",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-30"
        },
        {
          "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-1393",
    "datePublished": "2023-03-30T00:00:00.000Z",
    "dateReserved": "2023-03-14T00:00:00.000Z",
    "dateUpdated": "2025-02-14T15:43:04.174Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0229 (GCVE-0-2024-0229)

Vulnerability from cvelistv5

Published

2024-02-09 06:29

Modified

2025-08-04 21:04

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Summary

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:0320	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0557	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0558	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0597	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0607	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0614	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0617	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0621	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0626	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0629	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2169	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2170	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2995	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2996	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-0229	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2256690	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

►

Version: 21.1.0 ≤

Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	Unaffected: 0:1.1.0-25.el6_10.13 < * cpe:/o:redhat:rhel_els:6
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-27.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-31.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.7 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-22.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-15.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.9 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.7 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-3.el9_3.6 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-24.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:22.1.9-5.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.8 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.5 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T17:41:16.397Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:0320",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0320"
          },
          {
            "name": "RHSA-2024:0557",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0557"
          },
          {
            "name": "RHSA-2024:0558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0558"
          },
          {
            "name": "RHSA-2024:0597",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0597"
          },
          {
            "name": "RHSA-2024:0607",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0607"
          },
          {
            "name": "RHSA-2024:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0614"
          },
          {
            "name": "RHSA-2024:0617",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0617"
          },
          {
            "name": "RHSA-2024:0621",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0621"
          },
          {
            "name": "RHSA-2024:0626",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0626"
          },
          {
            "name": "RHSA-2024:0629",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0629"
          },
          {
            "name": "RHSA-2024:2169",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2169"
          },
          {
            "name": "RHSA-2024:2170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2170"
          },
          {
            "name": "RHSA-2024:2995",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2995"
          },
          {
            "name": "RHSA-2024:2996",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2996"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-0229"
          },
          {
            "name": "RHBZ#2256690",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256690"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0229",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-12T16:50:56.761255Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-29T14:31:56.224Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.freedesktop.org/xorg/xserver",
          "defaultStatus": "unaffected",
          "packageName": "xorg-server",
          "versions": [
            {
              "lessThan": "21.1.11",
              "status": "affected",
              "version": "21.1.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-27.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-31.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-22.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-15.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-3.el9_3.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-24.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:22.1.9-5.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Upstream acknowledges Jan-Niklas Sohn (Trend Micro Zero Day Initiative) as the original reporter."
        }
      ],
      "datePublic": "2024-01-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:04:11.745Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:0320",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0320"
        },
        {
          "name": "RHSA-2024:0557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0557"
        },
        {
          "name": "RHSA-2024:0558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0558"
        },
        {
          "name": "RHSA-2024:0597",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0597"
        },
        {
          "name": "RHSA-2024:0607",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0607"
        },
        {
          "name": "RHSA-2024:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0614"
        },
        {
          "name": "RHSA-2024:0617",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0617"
        },
        {
          "name": "RHSA-2024:0621",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0621"
        },
        {
          "name": "RHSA-2024:0626",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0626"
        },
        {
          "name": "RHSA-2024:0629",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0629"
        },
        {
          "name": "RHSA-2024:2169",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2169"
        },
        {
          "name": "RHSA-2024:2170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2170"
        },
        {
          "name": "RHSA-2024:2995",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2995"
        },
        {
          "name": "RHSA-2024:2996",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2996"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-0229"
        },
        {
          "name": "RHBZ#2256690",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256690"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-01-03T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-01-16T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-787: Out-of-bounds Write"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-0229",
    "datePublished": "2024-02-09T06:29:51.542Z",
    "dateReserved": "2024-01-03T21:53:07.804Z",
    "dateUpdated": "2025-08-04T21:04:11.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-46343 (GCVE-0-2022-46343)

Vulnerability from cvelistv5

Published

2022-12-14 00:00

Modified

2025-04-22 15:14

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

use-after-free

Summary

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

References

►

URL

Tags

	https://access.redhat.com/security/cve/CVE-2022-46343
	https://bugzilla.redhat.com/show_bug.cgi?id=2151758
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/	vendor-advisory
	https://www.debian.org/security/2022/dsa-5304	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/	vendor-advisory
	https://security.gentoo.org/glsa/202305-30

Impacted products

	Vendor	Product	Version
	n/a	xorg-x11-server	Version: xorg-x11-server-1.20.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:31:46.549Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2022-46343"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151758"
          },
          {
            "name": "FEDORA-2022-c3a65f7c65",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
          },
          {
            "name": "FEDORA-2022-721a78b7e5",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
          },
          {
            "name": "DSA-5304",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5304"
          },
          {
            "name": "FEDORA-2022-dd3eb7e0a8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-30"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-46343",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-22T15:13:50.993173Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-22T15:14:18.715Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "xorg-x11-server-1.20.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "use-after-free",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T05:08:22.164Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://access.redhat.com/security/cve/CVE-2022-46343"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151758"
        },
        {
          "name": "FEDORA-2022-c3a65f7c65",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
        },
        {
          "name": "FEDORA-2022-721a78b7e5",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
        },
        {
          "name": "DSA-5304",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5304"
        },
        {
          "name": "FEDORA-2022-dd3eb7e0a8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-30"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-46343",
    "datePublished": "2022-12-14T00:00:00.000Z",
    "dateReserved": "2022-11-30T00:00:00.000Z",
    "dateUpdated": "2025-04-22T15:14:18.715Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6478 (GCVE-0-2023-6478)

Vulnerability from cvelistv5

Published

2023-12-13 06:27

Modified

2025-08-04 21:03

Severity ?

7.6 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

CWE

CWE-190 - Integer Overflow or Wraparound

Summary

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2023:7886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0006	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0009	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0010	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0014	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0015	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0016	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0017	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0018	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0020	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2169	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2170	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2995	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2996	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2023-6478	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2253298	issue-tracking, x_refsource_REDHAT
	https://gitlab.freedesktop.org/xorg/xserver/-/commit/14f480010a93ff962fef66a16412fafff81ad632
	https://lists.x.org/archives/xorg-announce/2023-December/003435.html

Impacted products

Vendor

Product

Version

►

Red Hat

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION

Unaffected: 0:1.1.0-25.el6_10.13 < *
cpe:/o:redhat:rhel_els:6

Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-28.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-25.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.4 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-22.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-15.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.6 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.6 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.6 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.5 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.5 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.5 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.6 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.4 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-3.el9_3.3 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-24.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:22.1.9-5.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.5 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.2 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:28:21.864Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/1"
          },
          {
            "name": "RHSA-2023:7886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7886"
          },
          {
            "name": "RHSA-2024:0006",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0006"
          },
          {
            "name": "RHSA-2024:0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0009"
          },
          {
            "name": "RHSA-2024:0010",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0010"
          },
          {
            "name": "RHSA-2024:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0014"
          },
          {
            "name": "RHSA-2024:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0015"
          },
          {
            "name": "RHSA-2024:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0016"
          },
          {
            "name": "RHSA-2024:0017",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0017"
          },
          {
            "name": "RHSA-2024:0018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0018"
          },
          {
            "name": "RHSA-2024:0020",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0020"
          },
          {
            "name": "RHSA-2024:2169",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2169"
          },
          {
            "name": "RHSA-2024:2170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2170"
          },
          {
            "name": "RHSA-2024:2995",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2995"
          },
          {
            "name": "RHSA-2024:2996",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2996"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-6478"
          },
          {
            "name": "RHBZ#2253298",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253298"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/14f480010a93ff962fef66a16412fafff81ad632"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00008.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6R63Z6GIWM3YUNZRCGFODUXLW3GY2HD6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7PP47YXKM5ETLCYEF6473R3VFCJ6QT2S/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFHV5KCQ2SVOD4QMCPZ5HC6YL44L7YJD/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LJDFWDB7EQVZA45XDP7L5WRSRWS6RVRR/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.x.org/archives/xorg-announce/2023-December/003435.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-30"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240125-0003/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5576"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-28.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-25.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-22.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-15.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-3.el9_3.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-24.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:22.1.9-5.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by Peter Hutterer (Red Hat)."
        }
      ],
      "datePublic": "2023-12-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:03:38.761Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2023:7886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7886"
        },
        {
          "name": "RHSA-2024:0006",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0006"
        },
        {
          "name": "RHSA-2024:0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0009"
        },
        {
          "name": "RHSA-2024:0010",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0010"
        },
        {
          "name": "RHSA-2024:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0014"
        },
        {
          "name": "RHSA-2024:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0015"
        },
        {
          "name": "RHSA-2024:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0016"
        },
        {
          "name": "RHSA-2024:0017",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0017"
        },
        {
          "name": "RHSA-2024:0018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0018"
        },
        {
          "name": "RHSA-2024:0020",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0020"
        },
        {
          "name": "RHSA-2024:2169",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2169"
        },
        {
          "name": "RHSA-2024:2170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2170"
        },
        {
          "name": "RHSA-2024:2995",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2995"
        },
        {
          "name": "RHSA-2024:2996",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2996"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-6478"
        },
        {
          "name": "RHBZ#2253298",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253298"
        },
        {
          "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/14f480010a93ff962fef66a16412fafff81ad632"
        },
        {
          "url": "https://lists.x.org/archives/xorg-announce/2023-December/003435.html"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-11-30T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-12-13T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-190: Integer Overflow or Wraparound"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-6478",
    "datePublished": "2023-12-13T06:27:41.017Z",
    "dateReserved": "2023-12-04T06:40:47.239Z",
    "dateUpdated": "2025-08-04T21:03:38.761Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-0494 (GCVE-0-2023-0494)

Vulnerability from cvelistv5

Published

2023-03-27 00:00

Modified

2025-02-24 17:43

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416

Summary

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.

References

►

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=2165995
	https://lists.x.org/archives/xorg-announce/2023-February/003320.html
	https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec
	https://security.gentoo.org/glsa/202305-30	vendor-advisory

Impacted products

	Vendor	Product	Version
	n/a	xorg-x11-server	Version: xorg-server 21.1.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:10:56.201Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.x.org/archives/xorg-announce/2023-February/003320.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec"
          },
          {
            "name": "GLSA-202305-30",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-30"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-0494",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-24T17:41:52.537361Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-24T17:43:00.816Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "xorg-server 21.1.7"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"
        },
        {
          "url": "https://lists.x.org/archives/xorg-announce/2023-February/003320.html"
        },
        {
          "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec"
        },
        {
          "name": "GLSA-202305-30",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-30"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-0494",
    "datePublished": "2023-03-27T00:00:00.000Z",
    "dateReserved": "2023-01-25T00:00:00.000Z",
    "dateUpdated": "2025-02-24T17:43:00.816Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-46341 (GCVE-0-2022-46341)

Vulnerability from cvelistv5

Published

2022-12-14 00:00

Modified

2025-04-22 15:53

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

out-of-bounds access

Summary

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

References

►

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=2151756
	https://access.redhat.com/security/cve/CVE-2022-46341
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/	vendor-advisory
	https://www.debian.org/security/2022/dsa-5304	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/	vendor-advisory
	https://security.gentoo.org/glsa/202305-30

Impacted products

	Vendor	Product	Version
	n/a	xorg-x11-server	Version: xorg-x11-server-1.20.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:31:46.283Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151756"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2022-46341"
          },
          {
            "name": "FEDORA-2022-c3a65f7c65",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
          },
          {
            "name": "FEDORA-2022-721a78b7e5",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
          },
          {
            "name": "DSA-5304",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5304"
          },
          {
            "name": "FEDORA-2022-dd3eb7e0a8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-30"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-46341",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-22T15:53:14.810128Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-22T15:53:42.643Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "xorg-x11-server-1.20.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "out-of-bounds access",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T05:08:26.156Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151756"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2022-46341"
        },
        {
          "name": "FEDORA-2022-c3a65f7c65",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
        },
        {
          "name": "FEDORA-2022-721a78b7e5",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
        },
        {
          "name": "DSA-5304",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5304"
        },
        {
          "name": "FEDORA-2022-dd3eb7e0a8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-30"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-46341",
    "datePublished": "2022-12-14T00:00:00.000Z",
    "dateReserved": "2022-11-30T00:00:00.000Z",
    "dateUpdated": "2025-04-22T15:53:42.643Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6816 (GCVE-0-2023-6816)

Vulnerability from cvelistv5

Published

2024-01-18 04:31

Modified

2025-08-04 21:03

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Summary

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:0320	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0557	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0558	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0597	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0607	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0614	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0617	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0621	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0626	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0629	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2169	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2170	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2996	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2023-6816	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2257691	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

►

Red Hat

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION

Unaffected: 0:1.1.0-25.el6_10.13 < *
cpe:/o:redhat:rhel_els:6

Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-27.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-31.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.7 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-15.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.9 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.7 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-3.el9_3.6 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-24.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:22.1.9-5.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.8 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.5 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:07.410Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/01/18/1"
          },
          {
            "name": "RHSA-2024:0320",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0320"
          },
          {
            "name": "RHSA-2024:0557",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0557"
          },
          {
            "name": "RHSA-2024:0558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0558"
          },
          {
            "name": "RHSA-2024:0597",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0597"
          },
          {
            "name": "RHSA-2024:0607",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0607"
          },
          {
            "name": "RHSA-2024:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0614"
          },
          {
            "name": "RHSA-2024:0617",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0617"
          },
          {
            "name": "RHSA-2024:0621",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0621"
          },
          {
            "name": "RHSA-2024:0626",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0626"
          },
          {
            "name": "RHSA-2024:0629",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0629"
          },
          {
            "name": "RHSA-2024:2169",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2169"
          },
          {
            "name": "RHSA-2024:2170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2170"
          },
          {
            "name": "RHSA-2024:2996",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2996"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-6816"
          },
          {
            "name": "RHBZ#2257691",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257691"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-30"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240307-0006/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-6816",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-01-18T14:05:47.630340Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-17T21:19:20.905Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-27.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-31.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-15.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-3.el9_3.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-24.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:22.1.9-5.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Jan-Niklas Sohn (Trend Micro Zero Day Initiative) for reporting this issue."
        }
      ],
      "datePublic": "2024-01-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device\u0027s particular number of buttons, leading to a heap overflow if a bigger value was used."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:03:55.383Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:0320",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0320"
        },
        {
          "name": "RHSA-2024:0557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0557"
        },
        {
          "name": "RHSA-2024:0558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0558"
        },
        {
          "name": "RHSA-2024:0597",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0597"
        },
        {
          "name": "RHSA-2024:0607",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0607"
        },
        {
          "name": "RHSA-2024:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0614"
        },
        {
          "name": "RHSA-2024:0617",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0617"
        },
        {
          "name": "RHSA-2024:0621",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0621"
        },
        {
          "name": "RHSA-2024:0626",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0626"
        },
        {
          "name": "RHSA-2024:0629",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0629"
        },
        {
          "name": "RHSA-2024:2169",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2169"
        },
        {
          "name": "RHSA-2024:2170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2170"
        },
        {
          "name": "RHSA-2024:2996",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2996"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-6816"
        },
        {
          "name": "RHBZ#2257691",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257691"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-01-10T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-01-16T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-787: Out-of-bounds Write"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-6816",
    "datePublished": "2024-01-18T04:31:07.908Z",
    "dateReserved": "2023-12-14T04:34:38.017Z",
    "dateUpdated": "2025-08-04T21:03:55.383Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-46340 (GCVE-0-2022-46340)

Vulnerability from cvelistv5

Published

2022-12-14 00:00

Modified

2025-04-22 15:54

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

stack overflow

Summary

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.

References

►

URL

Tags

	https://access.redhat.com/security/cve/CVE-2022-46340
	https://bugzilla.redhat.com/show_bug.cgi?id=2151755
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/	vendor-advisory
	https://www.debian.org/security/2022/dsa-5304	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWTH3SNJ3GKYDSN7I3QDGWYEPSMWU6EP/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/	vendor-advisory
	https://security.gentoo.org/glsa/202305-30

Impacted products

	Vendor	Product	Version
	n/a	xorg-x11-server	Version: xorg-x11-server-1.20.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:31:46.324Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2022-46340"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151755"
          },
          {
            "name": "FEDORA-2022-c3a65f7c65",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
          },
          {
            "name": "FEDORA-2022-721a78b7e5",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
          },
          {
            "name": "DSA-5304",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5304"
          },
          {
            "name": "FEDORA-2022-3d88188071",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWTH3SNJ3GKYDSN7I3QDGWYEPSMWU6EP/"
          },
          {
            "name": "FEDORA-2022-dd3eb7e0a8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-30"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-46340",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-22T15:54:12.563979Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-22T15:54:37.848Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "xorg-x11-server-1.20.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "stack overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T05:08:37.376Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://access.redhat.com/security/cve/CVE-2022-46340"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151755"
        },
        {
          "name": "FEDORA-2022-c3a65f7c65",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
        },
        {
          "name": "FEDORA-2022-721a78b7e5",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
        },
        {
          "name": "DSA-5304",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5304"
        },
        {
          "name": "FEDORA-2022-3d88188071",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWTH3SNJ3GKYDSN7I3QDGWYEPSMWU6EP/"
        },
        {
          "name": "FEDORA-2022-dd3eb7e0a8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-30"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-46340",
    "datePublished": "2022-12-14T00:00:00.000Z",
    "dateReserved": "2022-11-30T00:00:00.000Z",
    "dateUpdated": "2025-04-22T15:54:37.848Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-31080 (GCVE-0-2024-31080)

Vulnerability from cvelistv5

Published

2024-04-04 13:47

Modified

2025-08-04 21:06

Severity ?

7.3 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE

CWE-126 - Buffer Over-read

Summary

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:1785	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2036	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2037	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2038	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2039	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2040	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2041	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2042	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2080	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2616	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3258	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3261	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3343	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9093	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9122	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-31080	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2271997	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

►

Version: 29.1.0 ≤

Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	Unaffected: 0:1.1.0-25.el6_10.13 < * cpe:/o:redhat:rhel_els:6
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-29.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-33.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-23.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-10.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-16.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.11 < * cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.10 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.11 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.10 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-8.el9_4.3 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:23.2.7-1.el9 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-26.el9 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.11 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.8 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:46:04.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/04/03/13"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/04/12/10"
          },
          {
            "name": "RHSA-2024:1785",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1785"
          },
          {
            "name": "RHSA-2024:2036",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2036"
          },
          {
            "name": "RHSA-2024:2037",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2037"
          },
          {
            "name": "RHSA-2024:2038",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2038"
          },
          {
            "name": "RHSA-2024:2039",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2039"
          },
          {
            "name": "RHSA-2024:2040",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2040"
          },
          {
            "name": "RHSA-2024:2041",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2041"
          },
          {
            "name": "RHSA-2024:2042",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2042"
          },
          {
            "name": "RHSA-2024:2080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2080"
          },
          {
            "name": "RHSA-2024:2616",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2616"
          },
          {
            "name": "RHSA-2024:3258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3258"
          },
          {
            "name": "RHSA-2024:3261",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3261"
          },
          {
            "name": "RHSA-2024:3343",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3343"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-31080"
          },
          {
            "name": "RHBZ#2271997",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271997"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-31080",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-07T15:41:05.539453Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-03T18:18:59.223Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.freedesktop.org/xorg/xserver",
          "defaultStatus": "unaffected",
          "packageName": "xorg-server",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "29.1.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-29.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server",
            "cpe:/o:redhat:enterprise_linux:7::workstation"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-33.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-23.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-10.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-16.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-8.el9_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.2.7-1.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-26.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-04-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A heap-based buffer over-read vulnerability was found in the X.org server\u0027s ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker\u0027s inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-126",
              "description": "Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:06:17.457Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:1785",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1785"
        },
        {
          "name": "RHSA-2024:2036",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2036"
        },
        {
          "name": "RHSA-2024:2037",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2037"
        },
        {
          "name": "RHSA-2024:2038",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2038"
        },
        {
          "name": "RHSA-2024:2039",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2039"
        },
        {
          "name": "RHSA-2024:2040",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2040"
        },
        {
          "name": "RHSA-2024:2041",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2041"
        },
        {
          "name": "RHSA-2024:2042",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2042"
        },
        {
          "name": "RHSA-2024:2080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2080"
        },
        {
          "name": "RHSA-2024:2616",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2616"
        },
        {
          "name": "RHSA-2024:3258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3258"
        },
        {
          "name": "RHSA-2024:3261",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3261"
        },
        {
          "name": "RHSA-2024:3343",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3343"
        },
        {
          "name": "RHSA-2024:9093",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9093"
        },
        {
          "name": "RHSA-2024:9122",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9122"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-31080"
        },
        {
          "name": "RHBZ#2271997",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271997"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-03-28T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-04-03T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-126: Buffer Over-read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-31080",
    "datePublished": "2024-04-04T13:47:33.926Z",
    "dateReserved": "2024-03-28T02:56:55.574Z",
    "dateUpdated": "2025-08-04T21:06:17.457Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-46344 (GCVE-0-2022-46344)

Vulnerability from cvelistv5

Published

2022-12-14 00:00

Modified

2025-02-13 16:33

Severity ?

CWE

out-of-bounds access

Summary

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

References

►

URL

Tags

	https://access.redhat.com/security/cve/CVE-2022-46344
	https://bugzilla.redhat.com/show_bug.cgi?id=2151760
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/	vendor-advisory
	https://www.debian.org/security/2022/dsa-5304	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/	vendor-advisory
	https://security.gentoo.org/glsa/202305-30
	http://www.openwall.com/lists/oss-security/2023/12/13/1

Impacted products

	Vendor	Product	Version
	n/a	xorg-x11-server	Version: xorg-x11-server-1.20.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:31:46.296Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2022-46344"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151760"
          },
          {
            "name": "FEDORA-2022-c3a65f7c65",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
          },
          {
            "name": "FEDORA-2022-721a78b7e5",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
          },
          {
            "name": "DSA-5304",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5304"
          },
          {
            "name": "FEDORA-2022-dd3eb7e0a8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-30"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "xorg-x11-server-1.20.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "out-of-bounds access",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-13T15:06:28.232Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://access.redhat.com/security/cve/CVE-2022-46344"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151760"
        },
        {
          "name": "FEDORA-2022-c3a65f7c65",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/"
        },
        {
          "name": "FEDORA-2022-721a78b7e5",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/"
        },
        {
          "name": "DSA-5304",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5304"
        },
        {
          "name": "FEDORA-2022-dd3eb7e0a8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-30"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/12/13/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-46344",
    "datePublished": "2022-12-14T00:00:00.000Z",
    "dateReserved": "2022-11-30T00:00:00.000Z",
    "dateUpdated": "2025-02-13T16:33:49.230Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9632 (GCVE-0-2024-9632)

Vulnerability from cvelistv5

Published

2024-10-30 07:42

Modified

2025-08-04 21:04

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Summary

A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:10090	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:8798	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9540	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9579	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9601	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9690	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9816	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9818	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9819	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9820	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9901	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:7163	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:7165	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:7458	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-9632	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2317233	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

►

Version: 1.1.1 ≤

Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:24.1.5-3.el10_0 < * cpe:/o:redhat:enterprise_linux:10.0
Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	Unaffected: 0:1.1.0-25.el6_10.13 < * cpe:/o:redhat:rhel_els:6
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.8.0-34.el7_9 < * cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-25.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-17.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-14.el8_10 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.12 < * cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.11 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.11 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.11 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:1.12.0-6.el8_6.12 < * cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 0:1.12.0-6.el8_6.12 < * cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 0:1.12.0-6.el8_6.12 < * cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.11 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.14.1-1.el9_5 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-28.el9_6 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:23.2.7-3.el9_6 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:1.11.0-22.el9_0.12 < * cpe:/a:redhat:rhel_e4s:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.9 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:1.13.1-8.el9_4.4 < * cpe:/a:redhat:rhel_eus:9.4::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-10-31T19:02:24.167Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/10/29/2"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00031.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Oct/20"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-9632",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-30T13:34:32.792082Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-30T13:35:19.624Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.freedesktop.org/xorg/xserver/",
          "defaultStatus": "unaffected",
          "packageName": "xorg-server",
          "versions": [
            {
              "lessThan": "21.1.14",
              "status": "affected",
              "version": "1.1.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:24.1.5-3.el10_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-34.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-25.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-14.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.12",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.12",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.12",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.12",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.14.1-1.el9_5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-28.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.2.7-3.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.12",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-8.el9_4.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-10-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:04:39.557Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:10090",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:10090"
        },
        {
          "name": "RHSA-2024:8798",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:8798"
        },
        {
          "name": "RHSA-2024:9540",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9540"
        },
        {
          "name": "RHSA-2024:9579",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9579"
        },
        {
          "name": "RHSA-2024:9601",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9601"
        },
        {
          "name": "RHSA-2024:9690",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9690"
        },
        {
          "name": "RHSA-2024:9816",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9816"
        },
        {
          "name": "RHSA-2024:9818",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9818"
        },
        {
          "name": "RHSA-2024:9819",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9819"
        },
        {
          "name": "RHSA-2024:9820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9820"
        },
        {
          "name": "RHSA-2024:9901",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9901"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "name": "RHSA-2025:7163",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:7163"
        },
        {
          "name": "RHSA-2025:7165",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:7165"
        },
        {
          "name": "RHSA-2025:7458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:7458"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-9632"
        },
        {
          "name": "RHBZ#2317233",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2317233"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-10-08T13:37:25.514000+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-10-29T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-122: Heap-based Buffer Overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-9632",
    "datePublished": "2024-10-30T07:42:35.320Z",
    "dateReserved": "2024-10-08T13:45:31.259Z",
    "dateUpdated": "2025-08-04T21:04:39.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21886 (GCVE-0-2024-21886)

Vulnerability from cvelistv5

Published

2024-02-28 12:13

Modified

2025-08-04 21:05

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Summary

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:0320	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0557	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0558	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0597	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0607	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0614	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0617	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0621	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0626	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:0629	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2169	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2170	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2995	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2996	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:12751	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-21886	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2256542	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

►

Version: 1.21.1.7

Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	Unaffected: 0:1.1.0-25.el6_10.13 < * cpe:/o:redhat:rhel_els:6
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.20.4-27.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::workstation cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.8.0-31.el7_9 < * cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::workstation cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::server
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.13.1-2.el8_9.7 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-22.el8 < * cpe:/a:redhat:enterprise_linux:8::crb cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-15.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_aus:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_aus:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:1.9.0-15.el8_2.9 < * cpe:/a:redhat:rhel_aus:8.2::appstream cpe:/a:redhat:rhel_tus:8.2::appstream cpe:/a:redhat:rhel_e4s:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:1.11.0-8.el8_4.8 < * cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:1.12.0-6.el8_6.9 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:1.12.0-15.el8_8.7 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.13.1-3.el9_3.6 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-24.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:22.1.9-5.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:1.11.0-22.el9_0.8 < * cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:1.12.0-14.el9_2.5 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:xorg:xserver:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xserver",
            "vendor": "xorg",
            "versions": [
              {
                "status": "affected",
                "version": "*"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:xorg:xwayland:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xwayland",
            "vendor": "xorg",
            "versions": [
              {
                "status": "affected",
                "version": "*"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21886",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-23T21:47:31.702467Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:37:54.900Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:35:33.404Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:0320",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0320"
          },
          {
            "name": "RHSA-2024:0557",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0557"
          },
          {
            "name": "RHSA-2024:0558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0558"
          },
          {
            "name": "RHSA-2024:0597",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0597"
          },
          {
            "name": "RHSA-2024:0607",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0607"
          },
          {
            "name": "RHSA-2024:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0614"
          },
          {
            "name": "RHSA-2024:0617",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0617"
          },
          {
            "name": "RHSA-2024:0621",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0621"
          },
          {
            "name": "RHSA-2024:0626",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0626"
          },
          {
            "name": "RHSA-2024:0629",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0629"
          },
          {
            "name": "RHSA-2024:2169",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2169"
          },
          {
            "name": "RHSA-2024:2170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2170"
          },
          {
            "name": "RHSA-2024:2995",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2995"
          },
          {
            "name": "RHSA-2024:2996",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2996"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-21886"
          },
          {
            "name": "RHBZ#2256542",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256542"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.freedesktop.org/xorg/xserver",
          "defaultStatus": "unaffected",
          "packageName": "xorg-server",
          "versions": [
            {
              "status": "affected",
              "version": "1.21.1.7"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::workstation",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-27.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::computenode",
            "cpe:/o:redhat:enterprise_linux:7::workstation",
            "cpe:/o:redhat:enterprise_linux:7::client",
            "cpe:/o:redhat:enterprise_linux:7::server"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-31.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-2.el8_9.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::crb",
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-22.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-15.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.2::appstream",
            "cpe:/a:redhat:rhel_tus:8.2::appstream",
            "cpe:/a:redhat:rhel_e4s:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.9.0-15.el8_2.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.4::appstream",
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-6.el8_6.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-3.el9_3.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-24.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:22.1.9-5.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Jan-Niklas Sohn (Trend Micro Zero Day Initiative) for reporting this issue."
        }
      ],
      "datePublic": "2024-01-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-04T21:05:57.697Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:0320",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0320"
        },
        {
          "name": "RHSA-2024:0557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0557"
        },
        {
          "name": "RHSA-2024:0558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0558"
        },
        {
          "name": "RHSA-2024:0597",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0597"
        },
        {
          "name": "RHSA-2024:0607",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0607"
        },
        {
          "name": "RHSA-2024:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0614"
        },
        {
          "name": "RHSA-2024:0617",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0617"
        },
        {
          "name": "RHSA-2024:0621",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0621"
        },
        {
          "name": "RHSA-2024:0626",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0626"
        },
        {
          "name": "RHSA-2024:0629",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0629"
        },
        {
          "name": "RHSA-2024:2169",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2169"
        },
        {
          "name": "RHSA-2024:2170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2170"
        },
        {
          "name": "RHSA-2024:2995",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2995"
        },
        {
          "name": "RHSA-2024:2996",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2996"
        },
        {
          "name": "RHSA-2025:12751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:12751"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-21886"
        },
        {
          "name": "RHBZ#2256542",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256542"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-01-02T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-01-16T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Xorg-x11-server: heap buffer overflow in disabledevice",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-122: Heap-based Buffer Overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-21886",
    "datePublished": "2024-02-28T12:13:12.555Z",
    "dateReserved": "2024-01-02T21:57:08.796Z",
    "dateUpdated": "2025-08-04T21:05:57.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2025:12751

Vulnerability from csaf_redhat

CVE-2024-31083 (GCVE-0-2024-31083)

Vulnerability from cvelistv5

CVE-2024-31081 (GCVE-0-2024-31081)

Vulnerability from cvelistv5

CVE-2022-46342 (GCVE-0-2022-46342)

Vulnerability from cvelistv5

CVE-2022-4283 (GCVE-0-2022-4283)

Vulnerability from cvelistv5

CVE-2024-21885 (GCVE-0-2024-21885)

Vulnerability from cvelistv5

CVE-2023-5367 (GCVE-0-2023-5367)

Vulnerability from cvelistv5

CVE-2023-1393 (GCVE-0-2023-1393)

Vulnerability from cvelistv5

CVE-2024-0229 (GCVE-0-2024-0229)

Vulnerability from cvelistv5

CVE-2022-46343 (GCVE-0-2022-46343)

Vulnerability from cvelistv5

CVE-2023-6478 (GCVE-0-2023-6478)

Vulnerability from cvelistv5

CVE-2023-0494 (GCVE-0-2023-0494)

Vulnerability from cvelistv5

CVE-2022-46341 (GCVE-0-2022-46341)

Vulnerability from cvelistv5

CVE-2023-6816 (GCVE-0-2023-6816)

Vulnerability from cvelistv5

CVE-2022-46340 (GCVE-0-2022-46340)

Vulnerability from cvelistv5

CVE-2024-31080 (GCVE-0-2024-31080)

Vulnerability from cvelistv5

CVE-2022-46344 (GCVE-0-2022-46344)

Vulnerability from cvelistv5

CVE-2024-9632 (GCVE-0-2024-9632)

Vulnerability from cvelistv5

CVE-2024-21886 (GCVE-0-2024-21886)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature