Record status Published
Identifier year (not publication year) 2024
Source publication Feb 28, 2024
Source updated Nov 6, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent
A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
xorg-server
Vendor Unknown
Product Unknown
Platforms Unknown
Default status Unknown
Package xorg-server
Package collection https://gitlab.freedesktop.org/xorg/xserver
xorg-server · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedsemver 21.1.11 Unavailable None listed 21.1.11 unaffectedsemver * Unavailable None listed
xwayland
Vendor Unknown
Product Unknown
Platforms Unknown
Default status Unknown
Package xwayland
Package collection https://gitlab.freedesktop.org/xorg/xserver
xwayland · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedsemver 23.2.4 Unavailable None listed 23.2.4 unaffectedsemver * Unavailable None listed
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Vendor Red Hat
Product Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.1.0-25.el6_10.13 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 7
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.20.4-27.el7_9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 7
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.8.0-31.el7_9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.13.1-2.el8_9.7 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.20.11-22.el8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:21.1.3-15.el8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.2 Advanced Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.2 Advanced Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Advanced Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.9.0-15.el8_2.9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.2 Telecommunications Update Service
Vendor Red Hat
Product Red Hat Enterprise Linux 8.2 Telecommunications Update Service
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Telecommunications Update Service · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.9.0-15.el8_2.9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.9.0-15.el8_2.9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.11.0-8.el8_4.8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Telecommunications Update Service
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Telecommunications Update Service · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.11.0-8.el8_4.8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.11.0-8.el8_4.8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.6 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.6 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.12.0-6.el8_6.9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.12.0-15.el8_8.7 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.13.1-3.el9_3.6 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.20.11-24.el9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:22.1.9-5.el9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.0 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.0 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.0 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.11.0-22.el9_0.8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.2 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.2 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.12.0-14.el9_2.5 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 6
Vendor Red Hat
Product Red Hat Enterprise Linux 6
Platforms Unknown
Default status unknown
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.