CVE-2024-0229
- Source
- https://cve.org/CVERecord?id=CVE-2024-0229
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0229.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-0229
- Downstream
BELL (1)
DEBIAN (1)
MGASA (1)
openSUSE (2)
RHSA (15)
RLSA (1)
SUSE (6)
- Related
- Published
- 2024-02-09T06:29:51Z
- Modified
- 2026-10-21T02:50:24Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
- Details
-
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.
- Database specific
{ "cna_assigner": "redhat", "cwe_ids": [ "CWE-787" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0229.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "fixed": "0:1.1.0-25.el6_10.13" }, { "fixed": "0:1.20.4-27.el7_9" }, { "fixed": "0:1.8.0-31.el7_9" }, { "fixed": "0:1.13.1-2.el8_9.7" }, { "fixed": "0:1.20.11-22.el8" }, { "fixed": "0:21.1.3-15.el8" }, { "fixed": "0:1.9.0-15.el8_2.9" }, { "fixed": "0:1.9.0-15.el8_2.9" }, { "fixed": "0:1.9.0-15.el8_2.9" }, { "fixed": "0:1.11.0-8.el8_4.8" }, { "fixed": "0:1.11.0-8.el8_4.8" }, { "fixed": "0:1.11.0-8.el8_4.8" }, { "fixed": "0:1.12.0-6.el8_6.9" }, { "fixed": "0:1.12.0-15.el8_8.7" }, { "fixed": "0:1.13.1-3.el9_3.6" }, { "fixed": "0:1.20.11-24.el9" }, { "fixed": "0:22.1.9-5.el9" }, { "fixed": "0:1.11.0-22.el9_0.8" }, { "fixed": "0:1.12.0-14.el9_2.5" } ], "source": "AFFECTED_FIELD", "strategy": "InverseAffectedRanges" } ] } ] }- References
-
- https://access.redhat.com/downloads/content/package-browser/
- https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/
- https://access.redhat.com/errata/RHSA-2024:0320
- https://access.redhat.com/errata/RHSA-2024:0557
- https://access.redhat.com/errata/RHSA-2024:0558
- https://access.redhat.com/errata/RHSA-2024:0597
- https://access.redhat.com/errata/RHSA-2024:0607
- https://access.redhat.com/errata/RHSA-2024:0614
- https://access.redhat.com/errata/RHSA-2024:0617
- https://access.redhat.com/errata/RHSA-2024:0621
- https://access.redhat.com/errata/RHSA-2024:0626
- https://access.redhat.com/errata/RHSA-2024:0629
- https://access.redhat.com/errata/RHSA-2024:2169
- https://access.redhat.com/errata/RHSA-2024:2170
- https://access.redhat.com/errata/RHSA-2024:2995
- https://access.redhat.com/errata/RHSA-2024:2996
- https://access.redhat.com/errata/RHSA-2025:12751
- https://access.redhat.com/security/cve/CVE-2024-0229
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0229.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-0229
- https://bugzilla.redhat.com/show_bug.cgi?id=2256690
- https://gitlab.freedesktop.org/xorg/xserver