| Package | Affected versions | Patched versions |
|---|---|---|
| x server | < 21.2.24 | 21.2.24 |
| xwayland | < 24.1.13 | 24.1.13 |
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free