The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22426 advisory.

    X.Org is an open-source implementation of the X Window System. It provides the basic low-level     functionality that full-fledged graphical user interfaces are designed upon.

    Security Fix(es):

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

    * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

    * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22753 advisory.

    X.Org is an open-source implementation of the X Window System. It provides the basic low-level     functionality that full-fledged graphical user interfaces are designed upon.

    Security Fix(es):

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

    * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

    * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-22096 advisory.

    - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation [Orabug:
    38694278]
    - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
    - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
    - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 [Orabug: 38157695]
    - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor [Orabug: 37712725]
    - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11050:07 advisory.

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
      * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
      * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57162. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57162 advisory.

  - A flaw was identified in the X.Org X server's X Keyboard (Xkb) extension where improper bounds checking in     the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
    (CVE-2025-62231)

  - A flaw was discovered in the X.Org X server's X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect. (CVE-2025-62230)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e0c935675d advisory.

    Fix recent xorg-x11-server CVEs:
    Fixes: CVE-2025-62229 CVE-2025-62230 CVE-2025-62231

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764081820 advisory.

  - A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges. (CVE-2024-9632)

  - A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms()     differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.
    (CVE-2025-26596)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
276949	RHEL 8 : xorg-x11-server (RHSA-2025:22426)	Nessus	Red Hat Local Security Checks	2025/12/1	2025/12/1	high
277471	RHEL 8 : xorg-x11-server (RHSA-2025:22753)	Nessus	Red Hat Local Security Checks	2025/12/4	2025/12/4	high
278177	Oracle Linux 7 : tigervnc (ELSA-2025-22096)	Nessus	Oracle Linux Local Security Checks	2025/12/11	2025/12/11	high
283230	MiracleLinux 8 : xorg-x11-server-1.20.11-27.el8_10 (AXSA:2025-11050:07)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/13	high
299695	AIX : Multiple Vulnerabilities (IJ57162)	Nessus	AIX Local Security Checks	2026/2/20	2026/10/16	high
277352	Fedora 43 : tigervnc (2025-e0c935675d)	Nessus	Fedora Local Security Checks	2025/12/3	2025/12/3	high
361858	AlmaLinux 9.2 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1764081820)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	high

検出

プラグインの検索

high

high

high

high

high

high

high