Home[1] Files[2] News[3] &[SERVICES_TAB] Contact[4] Add New[5]
- Debian Security Advisory 5800-1[6]
- Authored by Debian[7] | Site debian.org[8]
-
Debian Linux Security Advisory 5800-1 - Jan-Niklas Sohn discovered that a heap-based buffer overflow in the _XkbSetCompatMap function in the X Keyboard Extension of the X.org X server may result in privilege escalation if the X server is running privileged.
- systems | linux[9], debian[10]
- advisories | CVE-2024-9632[11]
- SHA-256 |
7de4b646e251e2d19beaff13447bea9203d84dff1252032449a7a84e3fe4b164 - Download[12] | Favorite[13] | View[14]
Change Mirror[15] Download[16]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5800-1Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.
https://www.debian.org/security/ Salvatore Bonaccorso
October 29, 2024 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : xorg-server
CVE ID : CVE-2024-9632
Debian Bug : 1086244
Jan-Niklas Sohn discovered that a heap-based buffer overflow in the
_XkbSetCompatMap function in the X Keyboard Extension of the X.org X
server may result in privilege escalation if the X server is running
privileged.
For the stable distribution (bookworm), this problem has been fixed in
version 2:21.1.7-3+deb12u8.
We recommend that you upgrade your xorg-server packages.
For the detailed security status of xorg-server please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/xorg-server
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list:Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.
-----BEGIN PGP SIGNATURE-----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=Y9nq
-----END PGP SIGNATURE-----
File Tags
- ActiveX[22] (933)
- Advisory[23] (87,350)
- Arbitrary[24] (17,173)
- BBS[25] (2,859)
- Bypass[26] (1,935)
- CGI[27] (1,049)
- Code Execution[28] (7,972)
- Conference[29] (693)
- Cracker[30] (845)
- CSRF[31] (3,440)
- DoS[32] (25,393)
- Encryption[33] (2,397)
- Exploit[34] (54,467)
- File Inclusion[35] (4,280)
- File Upload[36] (1,027)
- Firewall[37] (822)
- Info Disclosure[38] (2,937)
- Intrusion Detection[39] (923)
- Java[40] (3,166)
- JavaScript[41] (911)
- Kernel[42] (7,344)
- Local[43] (14,880)
- Magazine[44] (587)
- Overflow[45] (13,258)
- Perl[46] (1,435)
- PHP[47] (5,329)
- Proof of Concept[48] (2,417)
- Protocol[49] (3,759)
- Python[50] (1,673)
- Remote[51] (31,975)
- Root[52] (3,677)
- Rootkit[53] (531)
- Ruby[54] (644)
- Scanner[55] (1,661)
- Security Tool[56] (8,066)
- Shell[57] (3,325)
- Shellcode[58] (1,219)
- Sniffer[59] (905)
- Spoof[60] (2,299)
- SQL Injection[61] (16,750)
- TCP[62] (2,465)
- Trojan[63] (690)
- UDP[64] (921)
- Virus[65] (675)
- Vulnerability[66] (33,223)
- Web[67] (10,173)
- Whitepaper[68] (3,786)
- x86[69] (970)
- XSS[70] (18,328)
- Other[71]
File Archives
- October 2024[72]
- September 2024[73]
- August 2024[74]
- July 2024[75]
- June 2024[76]
- May 2024[77]
- April 2024[78]
- March 2024[79]
- February 2024[80]
- January 2024[81]
- December 2023[82]
- November 2023[83]
- Older[84]
Systems
- AIX[85] (430)
- Apple[86] (2,125)
- BSD[87] (378)
- CentOS[88] (61)
- Cisco[89] (1,954)
- Debian[90] (7,152)
- Fedora[91] (1,693)
- FreeBSD[92] (1,247)
- Gentoo[93] (4,599)
- HPUX[94] (881)
- iOS[95] (393)
- iPhone[96] (108)
- IRIX[97] (220)
- Juniper[98] (71)
- Linux[99] (51,714)
- Mac OS X[100] (696)
- Mandriva[101] (3,105)
- NetBSD[102] (256)
- OpenBSD[103] (490)
- RedHat[104] (17,162)
- Slackware[105] (941)
- Solaris[106] (1,615)
- SUSE[107] (1,444)
- Ubuntu[108] (9,949)
- UNIX[109] (9,472)
- UnixWare[110] (188)
- Windows[111] (6,784)
- Other[112]
- Services
- Security Services[123]
- Hosting By
- Rokasec[124]
Read more https://packetstormsecurity.com/files/182411/dsa-5800-1.txt


