Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-0229

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.

Published

2024-02-09T07:16:00.107

Last Modified

2024-11-23T03:15:07.287

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-787
  • Type: Secondary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application x.org x_server < 21.1.11 Yes
Application x.org xwayland < 23.2.4 Yes
Operating System fedoraproject fedora 39 Yes
Operating System redhat enterprise_linux 7.0 Yes
Operating System redhat enterprise_linux 8.0 Yes
Operating System redhat enterprise_linux 9.0 Yes
Operating System redhat enterprise_linux_aus 8.2 Yes
Operating System redhat enterprise_linux_aus 8.4 Yes
Operating System redhat enterprise_linux_eus 8.6 Yes
Operating System redhat enterprise_linux_eus 8.8 Yes
Operating System redhat enterprise_linux_eus 9.0 Yes
Operating System redhat enterprise_linux_eus 9.2 Yes
Operating System redhat enterprise_linux_tus 8.2 Yes
Operating System redhat enterprise_linux_tus 8.4 Yes
Operating System redhat enterprise_linux_update_services_for_sap_solutions 8.2 Yes
Operating System redhat enterprise_linux_update_services_for_sap_solutions 8.4 Yes
References