This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] X.Org and Xwayland fix a high-severity vulnerability
X.Org X server with version 21.1.14 and Xwayland with version 24.1.4 fix a high-severity vulnerability [1]. Debian has already released fixes for the bullseye distribution in version 2:1.20.11-1+deb11u14, bookworm in version 2:21.1.7-3+deb12u8 and sid in version 2:21.1.14-1 [2]. Slackware released a fix as part of SSA:2024-304-04 [3].
An authenticated local attacker is able to exploit a buffer overflow caused by an incorrect allocation size in the _XkbSetCompatMap function. This may lead to privilege escalation if the X.Org server runs as root, or to remote code execution when the program runs over SSH [1].
The vulnerability is present in products:
- X.Org X server; <21.1.14
- Xwayland; <24.1.4
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2024-9632 at cve.org, NVD
- CWE-122: Heap-based Buffer Overflow at cwe.mitre.org
The vulnerability was publicly disclosed 29. 10. 2024.
Links
By CESNET, z.s.p.o. Michaela Jarošová on 31. 10. 2024.