FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-27 12:04:33 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
141f2a22-a6a7-11ef-b282-0c9d92850f7a	xorg server -- _XkbSetCompatMap vulnerability The X.Org project reports: CVE-2024-9632: Heap buffer Heap-based buffer overflow privilege escalation in _XkbSetCompatMap The _XkbSetCompatMap() function attempts to resize the `sym_interpret` buffer. However, It didn't update its size properly. It updated `num_si` only, without updating `size_si`. This may lead to local privilege escalation if the server is run as root or remote code execution (e.g. x11 over ssh). Discovery 2024-10-29 Entry 2024-11-19 xorg-server < 21.1.14,1 xwayland < 24.1.4,1 CVE-2024-9632 https://lists.x.org/archives/xorg-announce/2024-October/003545.html

VuXML ID

Description

141f2a22-a6a7-11ef-b282-0c9d92850f7a

xorg server -- _XkbSetCompatMap vulnerability

The X.Org project reports:

CVE-2024-9632: Heap buffer Heap-based buffer overflow privilege escalation in _XkbSetCompatMap
The _XkbSetCompatMap() function attempts to resize the `sym_interpret` buffer. However, It didn't update its size properly. It updated `num_si` only, without updating `size_si`. This may lead to local privilege escalation if the server is run as root or remote code execution (e.g. x11 over ssh).

Discovery 2024-10-29
Entry 2024-11-19
xorg-server

< 21.1.14,1

xwayland

< 24.1.4,1

CVE-2024-9632
https://lists.x.org/archives/xorg-announce/2024-October/003545.html