Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84633.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-84633
Upstream
  • CVE-2026-34003
Published
2026-04-23T16:16:24Z
Modified
2026-09-20T05:32:18Z
Summary
CVE-2026-34003 affecting package xorg-x11-server 1.20.10-6
Details

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.

References

Affected packages

Azure Linux:3 / xorg-x11-server

Package

Name
xorg-x11-server
Purl
pkg:rpm/azure-linux/xorg-x11-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
1.20.10-6

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84633.json"