Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE-2024-9632: Heap-based buffer overflow privilege escalation in _XkbSetCompatMap #1084

Closed
GimmeHardware opened this issue Dec 6, 2024 · 2 comments

Comments

@GimmeHardware
Copy link

X.Org Security Advisory: Issues in X.Org X server prior to 21.1.14 and Xwayland prior to 24.1.4
CVE-2024-9632: Heap-based buffer overflow privilege escalation in _XkbSetCompatMap
Introduced in: xorg-server-1.1.1 (2006)
Fixed in: xorg-server-21.1.14 and xwayland-24.1.4

There's a link to the commit that fixes it in the above linked announcement.
I see the affected code in nx-libs but it's not identical because of its age.

@GimmeHardware
Copy link
Author

Whoops submitted this CVE with others in issue 1085.

@GimmeHardware GimmeHardware closed this as not planned Won't fix, can't repro, duplicate, stale Dec 6, 2024
@GimmeHardware
Copy link
Author

Duplicate of #1085

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant