CVE-2019-17624

"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sending ct.c_char 1000 times, an attacker can cause a denial of service (application crash) or possibly have unspecified other impact. Note: It is disputed if the X.Org X Server is involved or if there is a stack overflow.

• CWE-787

• http://packetstormsecurity.com/files/154868/X.Org-X-Server-1.20.4-Local-Stack-Overflow.htmlThird Party Advisory
• https://www.exploit-db.com/exploits/47507Exploit, Third Party Advisory, VDB Entry
• https://www.x.org/releases/individual/xserver/Release Notes, Vendor Advisory
• http://packetstormsecurity.com/files/154868/X.Org-X-Server-1.20.4-Local-Stack-Overflow.htmlThird Party Advisory
• https://www.exploit-db.com/exploits/47507Exploit, Third Party Advisory, VDB Entry
• https://www.x.org/releases/individual/xserver/Release Notes, Vendor Advisory

Published

Oct 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17610HongCMS 3.0.0 has XSS via the install/index.php dbpassword p…6.1
• CVE-2019-17611HongCMS 3.0.0 has XSS via the install/index.php tableprefix …6.1
• CVE-2019-17612An issue was discovered in 74CMS v5.2.8. There is a SQL Inje…7.2
• CVE-2019-17613qibosoft 7 allows remote code execution because do/jf.php ma…9.8
• CVE-2019-1762A vulnerability in the Secure Storage feature of Cisco IOS a…4.4
• CVE-2019-17621The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi …9.8
• CVE-2019-17625There is a stored XSS in Rambox 0.6.9 that can lead to code …9
• CVE-2019-17626ReportLab through 3.5.26 allows remote code execution becaus…9.8
• CVE-2019-17627The Yale Bluetooth Key application for mobile devices allows…6.5
• CVE-2019-17629CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin…4.8
• CVE-2019-1763A vulnerability in the web-based management interface of Ses…7.5
• CVE-2019-17630CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin…4.8