The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8341:11 advisory.

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
      * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
      * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7733:08 advisory.

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents     (CVE-2024-31080)
      * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice     (CVE-2024-31081)
      * xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7672:03 advisory.

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
      * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
      * xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_3258 advisory.

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)

    * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0340 advisory.

    This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 8.8. It addresses 12 CVEs:
    CVE-2023-6816, CVE-2024-0229, CVE-2024-31080, CVE-2024-31081, CVE-2024-21886, and 7 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of     private at creation. It uses the cursor bits type with the cursor as private, and when initiating the     cursor, that overwrites the XSELINUX context. (CVE-2024-0409)

  - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation.
    If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a     dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
    (CVE-2023-1393)

  - A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect     calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function     in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible     escalation of privileges or denial of service. (CVE-2023-5367)

  - A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and     legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if     the pointer is warped from within a window on one screen to the root window of the other screen and if the     original window is destroyed followed by another window being destroyed. (CVE-2023-5380)

  - A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the     buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a     GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the     XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.
    (CVE-2024-0408)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8106:09 advisory.

    * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
      * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
      * xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
292795	MiracleLinux 8 : tigervnc-1.13.1-10.el8 (AXSA:2024-8341:11)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
293548	MiracleLinux 7 : tigervnc-1.8.0-33.0.1.el7.AXS7 (AXSA:2024-7733:08)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
291954	MiracleLinux 7 : xorg-x11-server-1.20.4-29.el7 (AXSA:2024-7672:03)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
356089	Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3258)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
353520	Rocky Linux 8.8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0340)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	critical
242770	NewStart CGSL MAIN 7.02 : xorg-x11-server Multiple Vulnerabilities (NS-SA-2025-0194)	Nessus	NewStart CGSL Local Security Checks	7/25/2025	7/25/2025	high
292627	MiracleLinux 9 : tigervnc-1.13.1-8.el9.3 (AXSA:2024-8106:09)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

critical

high

high