Advisories » MGASA-2024-0357

Updated x11-server, x11-server-xwayland & tigervnc packages fix security vulnerability

Publication date: 12 Nov 2024
Modification date: 11 Nov 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-9632

Description

Due to an improperly tracked allocation size in _XkbSetCompatMap, a local
attacker may be able to trigger a buffer overflow condition via a
specially-crafted payload, leading to denial of service or local
privilege escalation in distributions where the X.org server is run with
root privileges. (CVE-2024-9632)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=33710
• https://www.openwall.com/lists/oss-security/2024/10/29/2
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9632

SRPMS

9/core

• x11-server-21.1.8-7.6.mga9
• x11-server-xwayland-22.1.9-1.6.mga9
• tigervnc-1.13.1-2.6.mga9