Описание
A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow. This vulnerability may lead to arbitrary code execution or cause the server to crash, resulting in a Denial of Service (DoS).
Отчет
This vulnerability is evaluated as having a Moderate severity for Red Hat Enterprise Linux because exploitation is restricted to an authenticated local user with access to an active X11 display session, preventing remote exploitation. A local client can trigger memory corruption within the display server by defining a large number of cursor barriers and subsequently generating pointer movement. While this flaw can lead to a crash of the display server or potentially execute code within the context of the running X server process, the blast radius is confined to the local graphical user session.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | tigervnc | Out of support scope | ||
| Red Hat Enterprise Linux 6 | xorg-x11-server | Out of support scope | ||
| Red Hat Enterprise Linux 7 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 7 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 8 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 8 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 9 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 10 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:85191 | 19.10.2026 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:86907 | 21.10.2026 |
| Red Hat Enterprise Linux 9 | xorg-x11-server | Fixed | RHSA-2026:84574 | 19.10.2026 |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
7.8 High
CVSS3