Access of Memory Location After End of Buffer Affecting xorg-server package, versions <2:1.20.11-1+deb11u11
Snyk CVSS
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN11-XORGSERVER-6159323
- published 16 Jan 2024
- disclosed 9 Feb 2024
Introduced: 16 Jan 2024
CVE-2024-0229 Open this link in a new tabHow to fix?
Upgrade Debian:11
xorg-server
to version 2:1.20.11-1+deb11u11 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream xorg-server
package and not the xorg-server
package as distributed by Debian
.
See How to fix?
for Debian:11
relevant fixed versions and status.
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.
References
- https://security-tracker.debian.org/tracker/CVE-2024-0229
- https://access.redhat.com/errata/RHSA-2024:0320
- https://access.redhat.com/errata/RHSA-2024:0557
- https://access.redhat.com/errata/RHSA-2024:0558
- https://access.redhat.com/errata/RHSA-2024:0597
- https://access.redhat.com/errata/RHSA-2024:0607
- https://access.redhat.com/errata/RHSA-2024:0614
- https://access.redhat.com/errata/RHSA-2024:0617
- https://access.redhat.com/errata/RHSA-2024:0621
- https://access.redhat.com/errata/RHSA-2024:0626
- https://access.redhat.com/errata/RHSA-2024:0629
- https://access.redhat.com/security/cve/CVE-2024-0229
- https://bugzilla.redhat.com/show_bug.cgi?id=2256690