PT-2019-15234 · X.Org+1 · X.Org Server+1

Marcelo Vázquez + 1 · Published 2019-06-03 · Updated 2020-08-24 · CVE-2019-17624

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions X.Org X Server version 1.20.4

Description A stack-based buffer overflow exists in the XQueryKeymap function. This can be triggered by sending a large number of ct.c char requests, potentially causing a denial of service or other unspecified impacts.

Recommendations For X.Org X Server version 1.20.4, consider applying a patch or update to fix the buffer overflow issue in the XQueryKeymap function. As a temporary workaround, restrict the input to the XQueryKeymap function to prevent excessive ct.c char requests.

Exploit

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2019-1984

ALT-PU-2019-2671

CVE-2019-17624

Affected Products

Alt Linux

X.Org Server

References · 5

• 🔥 https://exploit-db.com/exploits/47507 · Exploit
• https://osv.dev/vulnerability/CVE-2019-17624 · Vendor Advisory
• https://x.org/releases/individual/xserver · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17624 · Security Note
• http://packetstormsecurity.com/files/154868/X.Org-X-Server-1.20.4-Local-Stack-Overflow.html · Note