The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8798 advisory.

    - CVE fix for CVE-2024-9632

    xorg-x11-server-Xwayland

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9601 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 141f2a22-a6a7-11ef-b282-0c9d92850f7a advisory.

    The X.Org project reports:
    The _XkbSetCompatMap() function attempts to resize                     the `sym_interpret` buffer.

                    However, It didn't update its size properly.
                    It updated `num_si` only, without updating `size_si`.

                    This may lead to local privilege escalation if the                     server is run as root or remote code execution                     (e.g. x11 over ssh).

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9632 advisory.

  - A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker May be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges. (CVE-2024-9632)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9901 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges.(CVE-2024-9632)

    A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific     and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode).
    If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during     shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of     service.(CVE-2023-5574)

Tenable has extracted the preceding description block directly from the EulerOS xorg-x11-server security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges.(CVE-2024-9632)

Tenable has extracted the preceding description block directly from the EulerOS xorg-x11-server security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges. (CVE-2024-9632)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7458 advisory.

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

    * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)

    * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)

    * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)

    * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)

    * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)

    * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)

    * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)

    * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10356:01 advisory.

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)
      * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
      * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
      * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
      * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
      * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
      * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
      * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
      * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202411-08 (X.Org X server, XWayland: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE     identifiers referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:12751 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)

    * xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)

    * xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)

    * xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)

    * xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)

    * xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)

    * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)

    * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability     (CVE-2023-1393)

    * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)

    * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty     (CVE-2023-6478)

    * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885,ZDI-CAN-22744)

    * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886,ZDI-CAN-22840)

    * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access     (CVE-2024-0229,ZDI-CAN-22678)

    * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)

    * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
210232	Oracle Linux 8 : xorg-x11-server / and / xorg-x11-server-Xwayland (ELSA-2024-8798)	Nessus	Oracle Linux Local Security Checks	2024/11/4	2026/1/21	high
210921	RHEL 9 : tigervnc (RHSA-2024:9601)	Nessus	Red Hat Local Security Checks	2024/11/13	2024/11/13	high
211607	FreeBSD : xorg server -- _XkbSetCompatMap vulnerability (141f2a22-a6a7-11ef-b282-0c9d92850f7a)	Nessus	FreeBSD Local Security Checks	2024/11/19	2026/1/21	high
211707	CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2024-9632)	Nessus	MarinerOS Local Security Checks	2024/11/21	2026/1/21	high
211760	RHEL 7 : tigervnc (RHSA-2024:9901)	Nessus	Red Hat Local Security Checks	2024/11/24	2024/11/24	high
214180	EulerOS 2.0 SP9 : xorg-x11-server (EulerOS-SA-2025-1068)	Nessus	Huawei Local Security Checks	2025/1/14	2026/1/21	high
216034	EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2025-1168)	Nessus	Huawei Local Security Checks	2025/2/10	2026/1/21	high
230366	Linux Distros Unpatched Vulnerability : CVE-2024-9632	Nessus	Misc.	2025/3/6	2025/8/22	high
266666	RockyLinux 10 : xorg-x11-server-Xwayland (RLSA-2025:7458)	Nessus	Rocky Linux Local Security Checks	2025/10/6	2025/10/6	high
283053	MiracleLinux 9 : xorg-x11-server-Xwayland-23.2.7-3.el9_6 (AXSA:2025-10356:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	high
211499	GLSA-202411-08 : X.Org X server, XWayland: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/11/17	2026/1/21	high
243455	RHEL 6 : tigervnc (RHSA-2025:12751)	Nessus	Red Hat Local Security Checks	2025/8/4	2025/8/4	critical

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

critical