A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "xdmx", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xdmx-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xdmx-tools", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xdmx-tools-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xnest", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xnest-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xorg-server-source", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-common", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xephyr", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xephyr-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-core", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-core-dbg", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-core-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-core-udeb", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-core-udeb-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-dev", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-dev-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-xmir", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xserver-xorg-xmir-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xvfb", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" }, { "binary_name": "xvfb-dbgsym", "binary_version": "2:1.15.1-0ubuntu2.11+esm9" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "xdmx", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xdmx-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xdmx-tools", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xdmx-tools-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xmir", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xmir-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xnest", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xnest-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xorg-server-source", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-common", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xephyr", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xephyr-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-core", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-core-dbg", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-core-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-core-udeb", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-core-udeb-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-dev", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-legacy", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-legacy-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xserver-xorg-xmir", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xvfb", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xvfb-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xwayland", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" }, { "binary_name": "xwayland-dbgsym", "binary_version": "2:1.18.4-0ubuntu0.12+esm9" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "xdmx", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xdmx-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xdmx-tools", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xdmx-tools-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xmir", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xmir-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xnest", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xnest-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xorg-server-source", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-common", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xephyr", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xephyr-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xorg-core", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xorg-core-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xorg-core-udeb", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xorg-dev", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xorg-legacy", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xorg-legacy-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xserver-xorg-xmir", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xvfb", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xvfb-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xwayland", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" }, { "binary_name": "xwayland-dbgsym", "binary_version": "2:1.19.6-1ubuntu4.15+esm4" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "xdmx", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xdmx-dbgsym", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xdmx-tools", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xdmx-tools-dbgsym", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xnest", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xnest-dbgsym", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xorg-server-source", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-common", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-xephyr", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-xephyr-dbgsym", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-xorg-core", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-xorg-core-dbgsym", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-xorg-core-udeb", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-xorg-dev", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-xorg-legacy", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xserver-xorg-legacy-dbgsym", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xvfb", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xvfb-dbgsym", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xwayland", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" }, { "binary_name": "xwayland-dbgsym", "binary_version": "2:1.20.13-1ubuntu1~20.04.14" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "xnest", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xnest-dbgsym", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xorg-server-source", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xserver-common", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xserver-xephyr", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xserver-xephyr-dbgsym", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xserver-xorg-core", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xserver-xorg-core-dbgsym", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xserver-xorg-dev", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xserver-xorg-legacy", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xserver-xorg-legacy-dbgsym", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xvfb", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" }, { "binary_name": "xvfb-dbgsym", "binary_version": "2:21.1.4-2ubuntu1.7~22.04.7" } ] }