CVE-2024-9632
- Source
- https://cve.org/CVERecord?id=CVE-2024-9632
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-9632.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-9632
- Downstream
ALPINE (1)
BELL (1)
CLEANSTART (1)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (2)
RHSA (15)
SUSE (8)
UBUNTU (1)
- Related
- Published
- 2024-10-30T07:42:35Z
- Modified
- 2026-10-22T10:33:06Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
- Details
-
A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
- Database specific
{ "cna_assigner": "redhat", "cwe_ids": [ "CWE-122" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9632.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "fixed": "0:24.1.5-3.el10_0" }, { "fixed": "0:1.1.0-25.el6_10.13" }, { "fixed": "0:1.8.0-34.el7_9" }, { "fixed": "0:1.20.11-25.el8_10" }, { "fixed": "0:21.1.3-17.el8_10" }, { "fixed": "0:1.13.1-14.el8_10" }, { "fixed": "0:1.9.0-15.el8_2.12" }, { "fixed": "0:1.11.0-8.el8_4.11" }, { "fixed": "0:1.11.0-8.el8_4.11" }, { "fixed": "0:1.11.0-8.el8_4.11" }, { "fixed": "0:1.12.0-6.el8_6.12" }, { "fixed": "0:1.12.0-6.el8_6.12" }, { "fixed": "0:1.12.0-6.el8_6.12" }, { "fixed": "0:1.12.0-15.el8_8.11" }, { "fixed": "0:1.14.1-1.el9_5" }, { "fixed": "0:1.20.11-28.el9_6" }, { "fixed": "0:23.2.7-3.el9_6" }, { "fixed": "0:1.11.0-22.el9_0.12" }, { "fixed": "0:1.12.0-14.el9_2.9" }, { "fixed": "0:1.13.1-8.el9_4.4" } ], "source": "AFFECTED_FIELD", "strategy": "InverseAffectedRanges" } ] } ] }- References
-
- http://seclists.org/fulldisclosure/2024/Oct/20
- http://www.openwall.com/lists/oss-security/2024/10/29/2
- https://access.redhat.com/downloads/content/package-browser/
- https://lists.debian.org/debian-lts-announce/2024/10/msg00031.html
- https://access.redhat.com/errata/RHSA-2024:10090
- https://access.redhat.com/errata/RHSA-2024:8798
- https://access.redhat.com/errata/RHSA-2024:9540
- https://access.redhat.com/errata/RHSA-2024:9579
- https://access.redhat.com/errata/RHSA-2024:9601
- https://access.redhat.com/errata/RHSA-2024:9690
- https://access.redhat.com/errata/RHSA-2024:9816
- https://access.redhat.com/errata/RHSA-2024:9818
- https://access.redhat.com/errata/RHSA-2024:9819
- https://access.redhat.com/errata/RHSA-2024:9820
- https://access.redhat.com/errata/RHSA-2024:9901
- https://access.redhat.com/errata/RHSA-2025:12751
- https://access.redhat.com/errata/RHSA-2025:7163
- https://access.redhat.com/errata/RHSA-2025:7165
- https://access.redhat.com/errata/RHSA-2025:7458
- https://access.redhat.com/security/cve/CVE-2024-9632
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9632.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-9632
- https://bugzilla.redhat.com/show_bug.cgi?id=2317233
- https://gitlab.freedesktop.org/xorg/xserver/