critique
CVE-2026-34000
xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing.
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon AlmaLinux (élevée), Amazon (élevée), Oracle (élevée), Rocky Linux (élevée), Red Hat (moyenne).
Description
A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 9 | tigervnc, tigervnc-icons, tigervnc-license et 4 autres | 1.15.0-7.el9_8.1 |
| alpine 3.23 | xorg-server, xwayland | 21.1.22-r0 et 1 autres |
| alpine 3.24 | xorg-server, xwayland | 21.1.22-r0 et 1 autres |
| alpine edge | xorg-server, xwayland | 21.1.22-r0 et 1 autres |
| amazon linux 2023 | tigervnc, tigervnc-debuginfo, tigervnc-debugsource et 26 autres | 1.14.1-3.amzn2023.0.5 et 2 autres |
| chainguard | xorg-server | 21.1.22-r0 |
| debian 11 | xorg-server | 2:1.20.11-1+deb11u18 |
| debian 12 | xorg-server, xwayland | 2:21.1.7-3+deb12u12 |
| debian 13 | xorg-server, xwayland | 2:21.1.16-1.3+deb13u2 |
| debian 14 | xorg-server, xwayland | 2:21.1.22-1 et 1 autres |
| echo | xorg-server, xwayland | 2:21.1.7-3+deb12u12 |
| Oracle Linux 7 | tigervnc, tigervnc-icons, tigervnc-license et 13 autres | 1.8.0-33.0.11.el7_9 et 1 autres |
Afficher les 188 entrées de 34 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 9 | tigervnc | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
| alpine 3.23 | xorg-server | 21.1.22-r0 |
| alpine 3.23 | xwayland | 24.1.10-r0 |
| alpine 3.24 | xorg-server | 21.1.22-r0 |
| alpine 3.24 | xwayland | 24.1.10-r0 |
| alpine edge | xorg-server | 21.1.22-r0 |
| alpine edge | xwayland | 24.1.10-r0 |
| amazon linux 2023 | tigervnc | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-debuginfo | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-debugsource | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-icons | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-license | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-selinux | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-debuginfo | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-minimal | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-minimal-debuginfo | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-module | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-module-debuginfo | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | xorg-x11-server-Xephyr | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xephyr-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xnest | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xnest-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xorg | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xorg-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xvfb | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xvfb-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xwayland | 24.1.3-1.amzn2023.0.4 |
| amazon linux 2023 | xorg-x11-server-Xwayland-debuginfo | 24.1.3-1.amzn2023.0.4 |
| amazon linux 2023 | xorg-x11-server-Xwayland-debugsource | 24.1.3-1.amzn2023.0.4 |
| amazon linux 2023 | xorg-x11-server-Xwayland-devel | 24.1.3-1.amzn2023.0.4 |
| amazon linux 2023 | xorg-x11-server-common | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-debugsource | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-devel | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-source | 21.1.13-5.amzn2023.0.9 |
| chainguard | xorg-server | 21.1.22-r0 |
| debian 11 | xorg-server | 2:1.20.11-1+deb11u18 |
| debian 12 | xorg-server | 2:21.1.7-3+deb12u12 |
| debian 12 | xwayland | pas de correctif indiqué |
| debian 13 | xorg-server | 2:21.1.16-1.3+deb13u2 |
| debian 13 | xwayland | pas de correctif indiqué |
| debian 14 | xorg-server | 2:21.1.22-1 |
| debian 14 | xwayland | 2:24.1.10-1 |
| echo | xorg-server | 2:21.1.7-3+deb12u12 |
| echo | xwayland | pas de correctif indiqué |
| Oracle Linux 7 | tigervnc | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-icons | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-license | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-applet | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-minimal | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-module | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xdmx | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xephyr | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xnest | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xorg | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xvfb | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xwayland | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-common | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-devel | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-source | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 9 | tigervnc | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
| rapidfort alma 8 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort alma 8 | xorg-x11-server-source | pas de correctif indiqué |
| rapidfort alma 9 | tigervnc | 1.15.0-7.el9_8.1 |
| rapidfort alma 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| rapidfort alma 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| rapidfort alma 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| rapidfort alma 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| rapidfort alma 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| rapidfort alma 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
| rapidfort alma 9 | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| rapidfort alma 9 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort alma 9 | xorg-x11-server-source | pas de correctif indiqué |
| rapidfort alpine 3.20 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.20 | xwayland | 24.1.10-r0 |
| rapidfort alpine 3.21 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.21 | xwayland | 24.1.10-r0 |
| rapidfort alpine 3.22 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.22 | xwayland | 24.1.10-r0 |
| rapidfort alpine 3.23 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.23 | xwayland | 24.1.10-r0 |
| rapidfort alpine 3.24 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.24 | xwayland | 24.1.10-r0 |
| rapidfort amazon linux 2023 | tigervnc | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-icons | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-license | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-selinux | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-server | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-server-minimal | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-server-module | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xephyr | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xnest | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xorg | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xvfb | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xwayland | 24.1.3-1.amzn2023.0.4 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xwayland-devel | 24.1.3-1.amzn2023.0.4 |
| rapidfort amazon linux 2023 | xorg-x11-server-common | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-devel | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-source | 21.1.13-5.amzn2023.0.9 |
| rapidfort debian 12 | xorg-server | 2:21.1.16-1.3+deb13u2, 2:21.1.22-1 |
| rapidfort debian 12 | xwayland | 2:24.1.10-1 |
| rapidfort debian 13 | xorg-server | 2:21.1.16-1.3+deb13u2, 2:21.1.22-1 |
| rapidfort debian 13 | xwayland | 2:24.1.10-1 |
| rapidfort fedora 43 | tigervnc | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-icons | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-license | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-selinux | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-server | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-server-minimal | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-server-module | 1.16.2-2.fc43 |
| rapidfort fedora 43 | xorg-x11-server | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xephyr | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xnest | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xorg | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xvfb | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xwayland | 24.1.10-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xwayland-devel | 24.1.10-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-common | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-devel | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-source | 21.1.22-1.fc43 |
| rapidfort Oracle Linux 10 | xorg-x11-server-Xwayland | 0:24.1.5-6.el10_0 |
| rapidfort Oracle Linux 10 | xorg-x11-server-Xwayland-devel | 0:24.1.5-6.el10_0 |
| rapidfort Oracle Linux 9 | tigervnc | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-icons | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-license | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-selinux | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server-minimal | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server-module | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xdmx | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xephyr | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xnest | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xorg | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xvfb | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xwayland | 0:21.1.3-5.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| rapidfort Oracle Linux 9 | xorg-x11-server-common | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort Oracle Linux 9 | xorg-x11-server-source | pas de correctif indiqué |
| rapidfort Red Hat 9 | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| rapidfort Red Hat 9 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort Red Hat 9 | xorg-x11-server-source | pas de correctif indiqué |
| rapidfort rocky 8 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort rocky 9 | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| rapidfort rocky 9 | xorg-x11-server-devel | pas de correctif indiqué |
| Red Hat | tigervnc | pas de correctif indiqué |
| Red Hat | tigervnc-icons | pas de correctif indiqué |
| Red Hat | tigervnc-license | pas de correctif indiqué |
| Red Hat | tigervnc-selinux | pas de correctif indiqué |
| Red Hat | tigervnc-server | pas de correctif indiqué |
| Red Hat | tigervnc-server-applet | pas de correctif indiqué |
| Red Hat | tigervnc-server-minimal | pas de correctif indiqué |
| Red Hat | tigervnc-server-module | pas de correctif indiqué |
| Red Hat | xorg-x11-server | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xdmx | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xephyr | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xnest | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xorg | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xvfb | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xwayland | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| Red Hat | xorg-x11-server-common | pas de correctif indiqué |
| Red Hat | xorg-x11-server-devel | pas de correctif indiqué |
| Red Hat | xorg-x11-server-source | pas de correctif indiqué |
| rocky 9 | tigervnc | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
| root.io debian 11 | rootio-xorg-server | pas de correctif indiqué |
| root.io debian 12 | rootio-xorg-server | 2:21.1.7-3+deb12u12 |
| wolfi | xorg-server | 21.1.22-r0 |
Références
- https://access.redhat.com/errata/RHSA-2026:19342
- https://access.redhat.com/errata/RHSA-2026:20547
- https://access.redhat.com/errata/RHSA-2026:20555
- https://access.redhat.com/errata/RHSA-2026:20557
- https://access.redhat.com/errata/RHSA-2026:20558
- https://access.redhat.com/errata/RHSA-2026:20560
- https://access.redhat.com/errata/RHSA-2026:20561
- https://access.redhat.com/errata/RHSA-2026:20562
Les 48 références
- https://access.redhat.com/errata/RHSA-2026:20563
- https://access.redhat.com/errata/RHSA-2026:20575
- https://access.redhat.com/errata/RHSA-2026:20576
- https://access.redhat.com/errata/RHSA-2026:20590
- https://access.redhat.com/errata/RHSA-2026:21699
- https://access.redhat.com/errata/RHSA-2026:21712
- https://access.redhat.com/errata/RHSA-2026:21715
- https://access.redhat.com/errata/RHSA-2026:21716
- https://access.redhat.com/errata/RHSA-2026:21718
- https://access.redhat.com/errata/RHSA-2026:21741
- https://access.redhat.com/errata/RHSA-2026:21742
- https://access.redhat.com/errata/RHSA-2026:22424
- https://access.redhat.com/errata/RHSA-2026:22456
- https://access.redhat.com/errata/RHSA-2026:23254
- https://access.redhat.com/errata/RHSA-2026:23255
- https://access.redhat.com/errata/RHSA-2026:23496
- https://access.redhat.com/errata/RHSA-2026:24341
- https://access.redhat.com/security/cve/CVE-2026-34000
- https://bugzilla.redhat.com/2451106
- https://bugzilla.redhat.com/2451107
- https://bugzilla.redhat.com/2451109
- https://bugzilla.redhat.com/2451113
- https://bugzilla.redhat.com/2452022
- https://bugzilla.redhat.com/show_bug.cgi?id=2451106
- https://bugzilla.redhat.com/show_bug.cgi?id=2451107
- https://bugzilla.redhat.com/show_bug.cgi?id=2451109
- https://bugzilla.redhat.com/show_bug.cgi?id=2451113
- https://bugzilla.redhat.com/show_bug.cgi?id=2452022
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33999
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34000
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34001
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34003
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34352
- https://errata.almalinux.org/9/ALSA-2026-19342.html
- https://errata.rockylinux.org/RLSA-2026:19342
- https://linux.oracle.com/cve/CVE-2026-34000.html
- https://linux.oracle.com/errata/ELSA-2026-22456.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-34000
- https://www.cve.org/CVERecord?id=CVE-2026-34000