Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-93519

Опубликовано: 07 окт. 2026
Источник: redhat
CVSS3: 7.8

Описание

A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow. This vulnerability may lead to arbitrary code execution or cause the server to crash, resulting in a Denial of Service (DoS).

Отчет

This vulnerability is evaluated as having a Moderate severity for Red Hat Enterprise Linux because exploitation is restricted to an authenticated local user with access to an active X11 display session, preventing remote exploitation. A local client can trigger memory corruption within the display server by defining a large number of cursor barriers and subsequently generating pointer movement. While this flaw can lead to a crash of the display server or potentially execute code within the context of the running X server process, the blast radius is confined to the local graphical user session.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6tigervncOut of support scope
Red Hat Enterprise Linux 6xorg-x11-serverOut of support scope
Red Hat Enterprise Linux 7tigervncAffected
Red Hat Enterprise Linux 7xorg-x11-serverAffected
Red Hat Enterprise Linux 8tigervncAffected
Red Hat Enterprise Linux 8xorg-x11-serverAffected
Red Hat Enterprise Linux 9tigervncAffected
Red Hat Enterprise Linux 10xorg-x11-server-XwaylandFixedRHSA-2026:8519119.10.2026
Red Hat Enterprise Linux 8xorg-x11-server-XwaylandFixedRHSA-2026:8690721.10.2026
Red Hat Enterprise Linux 9xorg-x11-serverFixedRHSA-2026:8457419.10.2026

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2545887xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor()

7.8 High

CVSS3

Связанные уязвимости

ubuntu
20 дней назад

[XFixes Pointer Barrier Event List Buffer Overflow]

debian

[XFixes Pointer Barrier Event List Buffer Overflow]

rocky
7 дней назад

Important: xorg-x11-server security update

oracle-oval
8 дней назад

ELSA-2026-84574: xorg-x11-server security update (IMPORTANT)

rocky
5 дней назад

Important: xorg-x11-server-Xwayland security update

7.8 High

CVSS3