Vulnerability · Published Jan 18, 2024 · Assigned by redhat
CVE-2024-0408Xorg-x11-server: selinux unlabeled glx pbuffer
Medium 5.5
In plain English
A medium-severity security flaw in xorg-server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 74.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | xorg-x11-server-Xdmx | 1.20.11-22.el8 | ALSA-2024:2995 |
| AlmaLinux:9 | xorg-x11-server-Xdmx | 1.20.11-24.el9 | ALSA-2024:2169 |
| AlmaLinux:8 | xorg-x11-server-Xephyr | 1.20.11-22.el8 | ALSA-2024:2995 |
| AlmaLinux:9 | xorg-x11-server-Xephyr | 1.20.11-24.el9 | ALSA-2024:2169 |
| AlmaLinux:8 | xorg-x11-server-Xnest | 1.20.11-22.el8 | ALSA-2024:2995 |
| AlmaLinux:9 | xorg-x11-server-Xnest | 1.20.11-24.el9 | ALSA-2024:2169 |
| AlmaLinux:8 | xorg-x11-server-Xorg | 1.20.11-22.el8 | ALSA-2024:2995 |
| AlmaLinux:9 | xorg-x11-server-Xorg | 1.20.11-24.el9 | ALSA-2024:2169 |
| AlmaLinux:8 | xorg-x11-server-Xvfb | 1.20.11-22.el8 | ALSA-2024:2995 |
| AlmaLinux:9 | xorg-x11-server-Xvfb | 1.20.11-24.el9 | ALSA-2024:2169 |
| AlmaLinux:8 | xorg-x11-server-Xwayland | 21.1.3-15.el8 | ALSA-2024:2996 |
| AlmaLinux:9 | xorg-x11-server-Xwayland | 22.1.9-5.el9 | ALSA-2024:2170 |
| AlmaLinux:8 | xorg-x11-server-common | 1.20.11-22.el8 | ALSA-2024:2995 |
| AlmaLinux:9 | xorg-x11-server-common | 1.20.11-24.el9 | ALSA-2024:2169 |
| AlmaLinux:8 | xorg-x11-server-devel | 1.20.11-22.el8 | ALSA-2024:2995 |
| AlmaLinux:9 | xorg-x11-server-devel | 1.20.11-24.el9 | ALSA-2024:2169 |
| AlmaLinux:8 | xorg-x11-server-source | 1.20.11-22.el8 | ALSA-2024:2995 |
| AlmaLinux:9 | xorg-x11-server-source | 1.20.11-24.el9 | ALSA-2024:2169 |
| Alpine:v3.20 | xorg-server | 21.1.11-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.21 | xorg-server | 21.1.11-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.22 | xorg-server | 21.1.11-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.23 | xorg-server | 21.1.11-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.24 | xorg-server | 21.1.11-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.20 | xwayland | 23.2.4-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.21 | xwayland | 23.2.4-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.22 | xwayland | 23.2.4-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.23 | xwayland | 23.2.4-r0 | ALPINE-CVE-2024-0408 |
| Alpine:v3.24 | xwayland | 23.2.4-r0 | ALPINE-CVE-2024-0408 |
| Debian:12 | xorg-server | 2:21.1.7-3+deb12u5 | DSA-5603-1 |
| Debian:12 | xorg-server | 2:21.1.7-3+deb12u5 | DEBIAN-CVE-2024-0408 |
| Debian:13 | xorg-server | 2:21.1.11-1 | DEBIAN-CVE-2024-0408 |
| Debian:14 | xorg-server | 2:21.1.11-1 | DEBIAN-CVE-2024-0408 |
| Debian:12 | xwayland | no fix listed | DEBIAN-CVE-2024-0408 |
| Debian:13 | xwayland | 2:23.2.4-1 | DEBIAN-CVE-2024-0408 |
| Debian:14 | xwayland | 2:23.2.4-1 | DEBIAN-CVE-2024-0408 |
| Ubuntu:22.04:LTS | xorg-server | 2:21.1.4-2ubuntu1.7~22.04.7 | UBUNTU-CVE-2024-0408 |
| Ubuntu:22.04:LTS | xorg-server | 2:21.1.4-2ubuntu1.7~22.04.7 | USN-6587-1 |
| Ubuntu:22.04:LTS | xwayland | 2:22.1.1-1ubuntu0.10 | USN-6587-1 |
| Ubuntu:22.04:LTS | xwayland | 2:22.1.1-1ubuntu0.10 | UBUNTU-CVE-2024-0408 |
| Ubuntu:24.04:LTS | xwayland | 2:23.2.4-1 | UBUNTU-CVE-2024-0408 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| xorg-server | 21.1.0 – before 21.1.11 | |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
Weakness: CWE-158 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- RHSA-2024:0320 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2169 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2170 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2995 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2996 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-0408 vdb-entry, x_refsource_REDHAT
- RHBZ#2257689 issue-tracking, x_refsource_REDHAT
- https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/ x_transferred
- https://security.gentoo.org/glsa/202401-30 x_transferred
- https://security.netapp.com/advisory/ntap-20240307-0006/ x_transferred