Yüksek CVSS 7.8

CVE-2024-0229: X Server: sınır dışı yazma

Yayın: 9 Şubat 2024 10:16 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.

Özet bilgiler

Ürün: X.org X Server
CVSS v3.1: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %1,23 (yüzdelik 69)
CWE: CWE-787
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
x.org-x-server	—	—	21.1.11
x.org-xwayland	—	—	23.2.4
fedoraproject-fedora	39	39	—
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
redhat-enterprise-linux-aus	8.2	8.2	—
redhat-enterprise-linux-aus	8.4	8.4	—
redhat-enterprise-linux-eus	8.6	8.6	—
redhat-enterprise-linux-eus	8.8	8.8	—
redhat-enterprise-linux-eus	9.0	9.0	—
redhat-enterprise-linux-eus	9.2	9.2	—
redhat-enterprise-linux-tus	8.2	8.2	—
redhat-enterprise-linux-tus	8.4	8.4	—
redhat-enterprise-linux-update-services-for-sap-solutions	8.2	8.2	—
redhat-enterprise-linux-update-services-for-sap-solutions	8.4	8.4	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları