Published: 18/01/2024 Updated: 21/11/2024

A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tigervnc tigervnc
x.org xorg-server
x.org xwayland
fedoraproject fedora 39
redhat enterprise linux 6.0
redhat enterprise linux 7.0
redhat enterprise linux 8.0
redhat enterprise linux 9.0
redhat enterprise linux desktop 7.0
redhat enterprise linux for ibm z systems 7.0
redhat enterprise linux for power big endian 7.0
redhat enterprise linux for power little endian 7.0
redhat enterprise linux for scientific computing 7.0
redhat enterprise linux server 7.0
redhat enterprise linux workstation 7.0

Synopsis Important: xorg-x11-server security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this upd ...

Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer NOTE: listsxorg/archives/xorg/2024-January/061525htmlNOTE: gitlabfreedesktoporg/xorg/xserver/-/commit/9e2ecb2af8302dedc49cb6a63ebe063c58a9e7e3 (CVE-2023-6816) Reattaching to different master device may lead to out-of-bounds memory access NOTE: listsxorg/a ...

DescriptionA flaw was found in the XOrg server The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try ...

---------- Forwarded message --------- From: Jose Exposito Quintana <jexposit () redhat com> Date: Tue, Jan 16, 2024 at 3:24 PM Subject: XOrg Security Advisory: Issues in XOrg X server prior to 21111 and Xwayland prior to 2324 To: <xorg-announce () lists x org> XOrg Security Advisory: January 16, 2024 Issues in XOrg X serve ...

https://access.redhat.com/errata/RHSA-2024:0320 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2024-2455.html

CVE-2024-0408

Vulnerability Summary

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect