critique
CVE-2026-34002
xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Amazon (élevée), Oracle (élevée), Red Hat (moyenne).
Description
A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.23 | xorg-server, xwayland | 21.1.22-r0 et 1 autres |
| alpine 3.24 | xorg-server, xwayland | 21.1.22-r0 et 1 autres |
| alpine edge | xorg-server, xwayland | 21.1.22-r0 et 1 autres |
| amazon linux 2 | tigervnc, tigervnc-debuginfo, tigervnc-icons et 15 autres | 1.8.0-24.amzn2.0.9 et 1 autres |
| amazon linux 2023 | tigervnc, tigervnc-debuginfo, tigervnc-debugsource et 26 autres | 1.14.1-3.amzn2023.0.5 et 2 autres |
| chainguard | xorg-server | 21.1.22-r0 |
| debian 11 | xorg-server | 2:1.20.11-1+deb11u18 |
| debian 12 | xorg-server, xwayland | 2:21.1.7-3+deb12u12 |
| debian 13 | xorg-server, xwayland | 2:21.1.16-1.3+deb13u2 |
| debian 14 | xorg-server, xwayland | 2:21.1.22-1 et 1 autres |
| echo | xorg-server, xwayland | 2:21.1.7-3+deb12u12 |
| Oracle Linux 7 | tigervnc, tigervnc-icons, tigervnc-license et 13 autres | 1.8.0-33.0.11.el7_9 et 1 autres |
Afficher les 178 entrées de 32 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.23 | xorg-server | 21.1.22-r0 |
| alpine 3.23 | xwayland | 24.1.10-r0 |
| alpine 3.24 | xorg-server | 21.1.22-r0 |
| alpine 3.24 | xwayland | 24.1.10-r0 |
| alpine edge | xorg-server | 21.1.22-r0 |
| alpine edge | xwayland | 24.1.10-r0 |
| amazon linux 2 | tigervnc | 1.8.0-24.amzn2.0.9 |
| amazon linux 2 | tigervnc-debuginfo | 1.8.0-24.amzn2.0.9 |
| amazon linux 2 | tigervnc-icons | 1.8.0-24.amzn2.0.9 |
| amazon linux 2 | tigervnc-license | 1.8.0-24.amzn2.0.9 |
| amazon linux 2 | tigervnc-server | 1.8.0-24.amzn2.0.9 |
| amazon linux 2 | tigervnc-server-applet | 1.8.0-24.amzn2.0.9 |
| amazon linux 2 | tigervnc-server-minimal | 1.8.0-24.amzn2.0.9 |
| amazon linux 2 | tigervnc-server-module | 1.8.0-24.amzn2.0.9 |
| amazon linux 2 | xorg-x11-server-Xdmx | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-Xephyr | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-Xnest | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-Xorg | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-Xvfb | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-Xwayland | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-common | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-debuginfo | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-devel | 1.20.4-22.amzn2.0.11 |
| amazon linux 2 | xorg-x11-server-source | 1.20.4-22.amzn2.0.11 |
| amazon linux 2023 | tigervnc | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-debuginfo | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-debugsource | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-icons | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-license | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-selinux | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-debuginfo | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-minimal | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-minimal-debuginfo | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-module | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | tigervnc-server-module-debuginfo | 1.14.1-3.amzn2023.0.5 |
| amazon linux 2023 | xorg-x11-server-Xephyr | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xephyr-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xnest | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xnest-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xorg | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xorg-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xvfb | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xvfb-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-Xwayland | 24.1.3-1.amzn2023.0.4 |
| amazon linux 2023 | xorg-x11-server-Xwayland-debuginfo | 24.1.3-1.amzn2023.0.4 |
| amazon linux 2023 | xorg-x11-server-Xwayland-debugsource | 24.1.3-1.amzn2023.0.4 |
| amazon linux 2023 | xorg-x11-server-Xwayland-devel | 24.1.3-1.amzn2023.0.4 |
| amazon linux 2023 | xorg-x11-server-common | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-debuginfo | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-debugsource | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-devel | 21.1.13-5.amzn2023.0.9 |
| amazon linux 2023 | xorg-x11-server-source | 21.1.13-5.amzn2023.0.9 |
| chainguard | xorg-server | 21.1.22-r0 |
| debian 11 | xorg-server | 2:1.20.11-1+deb11u18 |
| debian 12 | xorg-server | 2:21.1.7-3+deb12u12 |
| debian 12 | xwayland | pas de correctif indiqué |
| debian 13 | xorg-server | 2:21.1.16-1.3+deb13u2 |
| debian 13 | xwayland | pas de correctif indiqué |
| debian 14 | xorg-server | 2:21.1.22-1 |
| debian 14 | xwayland | 2:24.1.10-1 |
| echo | xorg-server | 2:21.1.7-3+deb12u12 |
| echo | xwayland | pas de correctif indiqué |
| Oracle Linux 7 | tigervnc | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-icons | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-license | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-applet | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-minimal | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-module | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xdmx | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xephyr | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xnest | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xorg | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xvfb | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-Xwayland | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-common | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-devel | 1.20.4-29.0.7.el7_9 |
| Oracle Linux 7 | xorg-x11-server-source | 1.20.4-29.0.7.el7_9 |
| rapidfort alma 8 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort alma 8 | xorg-x11-server-source | pas de correctif indiqué |
| rapidfort alma 9 | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| rapidfort alma 9 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort alma 9 | xorg-x11-server-source | pas de correctif indiqué |
| rapidfort alpine 3.20 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.20 | xwayland | 24.1.10-r0 |
| rapidfort alpine 3.21 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.21 | xwayland | 24.1.10-r0 |
| rapidfort alpine 3.22 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.22 | xwayland | 24.1.10-r0 |
| rapidfort alpine 3.23 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.23 | xwayland | 24.1.10-r0 |
| rapidfort alpine 3.24 | xorg-server | 21.1.22-r0 |
| rapidfort alpine 3.24 | xwayland | 24.1.10-r0 |
| rapidfort amazon linux 2023 | tigervnc | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-icons | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-license | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-selinux | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-server | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-server-minimal | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | tigervnc-server-module | 1.14.1-3.amzn2023.0.5 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xephyr | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xnest | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xorg | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xvfb | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xwayland | 24.1.3-1.amzn2023.0.4 |
| rapidfort amazon linux 2023 | xorg-x11-server-Xwayland-devel | 24.1.3-1.amzn2023.0.4 |
| rapidfort amazon linux 2023 | xorg-x11-server-common | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-devel | 21.1.13-5.amzn2023.0.9 |
| rapidfort amazon linux 2023 | xorg-x11-server-source | 21.1.13-5.amzn2023.0.9 |
| rapidfort debian 12 | xorg-server | 2:21.1.16-1.3+deb13u2, 2:21.1.22-1 |
| rapidfort debian 12 | xwayland | 2:24.1.10-1 |
| rapidfort debian 13 | xorg-server | 2:21.1.16-1.3+deb13u2, 2:21.1.22-1 |
| rapidfort debian 13 | xwayland | 2:24.1.10-1 |
| rapidfort fedora 43 | tigervnc | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-icons | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-license | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-selinux | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-server | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-server-minimal | 1.16.2-2.fc43 |
| rapidfort fedora 43 | tigervnc-server-module | 1.16.2-2.fc43 |
| rapidfort fedora 43 | xorg-x11-server | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xephyr | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xnest | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xorg | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xvfb | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xwayland | 24.1.10-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-Xwayland-devel | 24.1.10-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-common | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-devel | 21.1.22-1.fc43 |
| rapidfort fedora 43 | xorg-x11-server-source | 21.1.22-1.fc43 |
| rapidfort Oracle Linux 10 | xorg-x11-server-Xwayland | 0:24.1.5-6.el10_0 |
| rapidfort Oracle Linux 10 | xorg-x11-server-Xwayland-devel | 0:24.1.5-6.el10_0 |
| rapidfort Oracle Linux 9 | tigervnc | 0:1.11.0-22.el9_0.17 |
| rapidfort Oracle Linux 9 | tigervnc-icons | 0:1.11.0-22.el9_0.17 |
| rapidfort Oracle Linux 9 | tigervnc-license | 0:1.11.0-22.el9_0.17 |
| rapidfort Oracle Linux 9 | tigervnc-selinux | 0:1.11.0-22.el9_0.17 |
| rapidfort Oracle Linux 9 | tigervnc-server | 0:1.11.0-22.el9_0.17 |
| rapidfort Oracle Linux 9 | tigervnc-server-minimal | 0:1.11.0-22.el9_0.17 |
| rapidfort Oracle Linux 9 | tigervnc-server-module | 0:1.11.0-22.el9_0.17 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xdmx | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xephyr | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xnest | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xorg | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xvfb | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xwayland | 0:21.1.3-5.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| rapidfort Oracle Linux 9 | xorg-x11-server-common | 0:1.20.11-13.el9_0 |
| rapidfort Oracle Linux 9 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort Oracle Linux 9 | xorg-x11-server-source | pas de correctif indiqué |
| rapidfort Red Hat 9 | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| rapidfort Red Hat 9 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort Red Hat 9 | xorg-x11-server-source | pas de correctif indiqué |
| rapidfort rocky 8 | xorg-x11-server-devel | pas de correctif indiqué |
| rapidfort rocky 9 | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| rapidfort rocky 9 | xorg-x11-server-devel | pas de correctif indiqué |
| Red Hat | tigervnc | pas de correctif indiqué |
| Red Hat | tigervnc-icons | pas de correctif indiqué |
| Red Hat | tigervnc-license | pas de correctif indiqué |
| Red Hat | tigervnc-selinux | pas de correctif indiqué |
| Red Hat | tigervnc-server | pas de correctif indiqué |
| Red Hat | tigervnc-server-applet | pas de correctif indiqué |
| Red Hat | tigervnc-server-minimal | pas de correctif indiqué |
| Red Hat | tigervnc-server-module | pas de correctif indiqué |
| Red Hat | xorg-x11-server | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xdmx | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xephyr | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xnest | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xorg | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xvfb | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xwayland | pas de correctif indiqué |
| Red Hat | xorg-x11-server-Xwayland-devel | pas de correctif indiqué |
| Red Hat | xorg-x11-server-common | pas de correctif indiqué |
| Red Hat | xorg-x11-server-devel | pas de correctif indiqué |
| Red Hat | xorg-x11-server-source | pas de correctif indiqué |
| root.io debian 11 | rootio-xorg-server | pas de correctif indiqué |
| root.io debian 12 | rootio-xorg-server | 2:21.1.7-3+deb12u12 |
| wolfi | xorg-server | 21.1.22-r0 |
Références
- https://access.redhat.com/errata/RHSA-2026:20547
- https://access.redhat.com/errata/RHSA-2026:20555
- https://access.redhat.com/errata/RHSA-2026:20557
- https://access.redhat.com/errata/RHSA-2026:20558
- https://access.redhat.com/errata/RHSA-2026:20560
- https://access.redhat.com/errata/RHSA-2026:20561
- https://access.redhat.com/errata/RHSA-2026:20562
- https://access.redhat.com/errata/RHSA-2026:20563
Les 30 références
- https://access.redhat.com/errata/RHSA-2026:20575
- https://access.redhat.com/errata/RHSA-2026:20576
- https://access.redhat.com/errata/RHSA-2026:20590
- https://access.redhat.com/errata/RHSA-2026:21699
- https://access.redhat.com/errata/RHSA-2026:21712
- https://access.redhat.com/errata/RHSA-2026:21715
- https://access.redhat.com/errata/RHSA-2026:21716
- https://access.redhat.com/errata/RHSA-2026:21718
- https://access.redhat.com/errata/RHSA-2026:21741
- https://access.redhat.com/errata/RHSA-2026:21742
- https://access.redhat.com/errata/RHSA-2026:22424
- https://access.redhat.com/errata/RHSA-2026:22456
- https://access.redhat.com/errata/RHSA-2026:23254
- https://access.redhat.com/errata/RHSA-2026:23255
- https://access.redhat.com/errata/RHSA-2026:23496
- https://access.redhat.com/errata/RHSA-2026:24341
- https://access.redhat.com/security/cve/CVE-2026-34002
- https://bugzilla.redhat.com/show_bug.cgi?id=2451112
- https://linux.oracle.com/cve/CVE-2026-34002.html
- https://linux.oracle.com/errata/ELSA-2026-22456.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-34002
- https://www.cve.org/CVERecord?id=CVE-2026-34002