A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular num
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support | EXTENSION — 0:1.1.0-25.el6_10.13 |
| Red Hat | Red Hat Enterprise Linux 7 | 0:1.20.4-27.el7_9 |
| Red Hat | Red Hat Enterprise Linux 7 | 0:1.8.0-31.el7_9 |
| Red Hat | Red Hat Enterprise Linux 8 | 0:1.13.1-2.el8_9.7 |
| Red Hat | Red Hat Enterprise Linux 8 | 0:21.1.3-15.el8 |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | 0:1.9.0-15.el8_2.9 |
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | 0:1.9.0-15.el8_2.9 |
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | 0:1.9.0-15.el8_2.9 |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:1.11.0-8.el8_4.8 |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | 0:1.11.0-8.el8_4.8 |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | 0:1.11.0-8.el8_4.8 |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | 0:1.12.0-6.el8_6.9 |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 0:1.12.0-15.el8_8.7 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:1.13.1-3.el9_3.6 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:1.20.11-24.el9 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:22.1.9-5.el9 |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | 0:1.11.0-22.el9_0.8 |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:1.12.0-14.el9_2.5 |
| Red Hat | Red Hat Enterprise Linux 6 | unspecified |
| Red Hat | Red Hat Enterprise Linux 8 | unspecified |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.