Threats Tagged 'cve-2024-9632'

Multiple security vulnerabilities have been identified in the xorg-x11-server-Xwayland component used in Red Hat Enterprise Linux 10 and related products. These include heap-based buffer overflows, use-after-free conditions, out-of-bounds writes, and use of uninitialized pointers. The issues affect the Xwayland server, which allows X clients to run under Wayland. Red Hat has released an important security update addressing these vulnerabilities.

A security update for xorg-x11-server-Xwayland on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including heap-based buffer overflows, use-after-free, out-of-bounds writes, and use of uninitialized pointers. These issues affect the Xwayland component, which allows X clients to run under Wayland. The vulnerabilities have a moderate security impact and are fixed in the updated packages provided by Red Hat.

Multiple security vulnerabilities have been identified and fixed in the xorg-x11-server component of Red Hat Enterprise Linux 9. These include a heap-based buffer overflow privilege escalation vulnerability in tigervnc (CVE-2024-9632) and several use-after-free, buffer overflow, heap overflow, out-of-bounds write, and uninitialized pointer vulnerabilities in Xwayland and related components (CVE-2025-26594 through CVE-2025-26601). Red Hat has released security updates addressing these issues with a moderate severity rating.

A heap-based buffer overflow vulnerability (CVE-2024-9632) exists in the tigervnc component of the xorg-x11-server package used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. This vulnerability could allow privilege escalation. Red Hat has issued a security advisory with an update to address this issue. The update is rated as Important by Red Hat Product Security. The vulnerability affects multiple architectures of Red Hat Enterprise Linux 7 ELS. No CVSS score is provided in the advisory.