CVE-2024-0409

Published: 18/01/2024 Updated: 22/05/2024

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 0

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

Vulnerable Product	Search on Vulmon	Subscribe to Product
x.org xwayland
x.org xorg-server
tigervnc tigervnc
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux for scientific computing 7.0
redhat enterprise linux 7.0
redhat enterprise linux 6.0
redhat enterprise linux server 7.0
redhat enterprise linux for power little endian 7.0
redhat enterprise linux for power big endian 7.0
redhat enterprise linux for ibm z systems 7.0
redhat enterprise linux 8.0
redhat enterprise linux 9.0
fedoraproject fedora 39

Synopsis Important: xorg-x11-server security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this upd ...

Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer NOTE: listsxorg/archives/xorg/2024-January/061525htmlNOTE: gitlabfreedesktoporg/xorg/xserver/-/commit/9e2ecb2af8302dedc49cb6a63ebe063c58a9e7e3 (CVE-2023-6816) Reattaching to different master device may lead to out-of-bounds memory access NOTE: listsxorg/a ...

DescriptionA flaw was found in the XOrg server The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX contextA flaw was found in the XOrg server The cursor code in both Xephyr and Xwaylan ...

LTS-120 is being updated in the LTS (Long Term Support) channel, version 12006099310 (Platform Version: 156621070), for most ChromeOS devices Release notes for LTS-120 can be found here Want to know more about Long-term Support? Click hereThis update contains selective Security fixes, including:Chrome Browser Security Fixes3392 ...

---------- Forwarded message --------- From: Jose Exposito Quintana <jexposit () redhat com> Date: Tue, Jan 16, 2024 at 3:24 PM Subject: XOrg Security Advisory: Issues in XOrg X server prior to 21111 and Xwayland prior to 2324 To: <xorg-announce () lists x org> XOrg Security Advisory: January 16, 2024 Issues in XOrg X serve ...

CWE-787 https://access.redhat.com/security/cve/CVE-2024-0409 https://bugzilla.redhat.com/show_bug.cgi?id=2257690 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/https://access.redhat.com/errata/RHSA-2024:0320 https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html https://security.gentoo.org/glsa/202401-30 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/https://security.netapp.com/advisory/ntap-20240307-0006/https://access.redhat.com/errata/RHSA-2024:2169 https://access.redhat.com/errata/RHSA-2024:2170 https://access.redhat.com/errata/RHSA-2024:2995 https://access.redhat.com/errata/RHSA-2024:2996 https://access.redhat.com/errata/RHSA-2024:0320 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2024-2455.html

CVE-2024-0409

Vulnerability Summary

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect