Log in Start free

Vulnerability · Published Jan 18, 2024 · Assigned by redhat

CVE-2024-0409Xorg-x11-server: selinux context corruption

High 7.8

In plain English

A high-severity out-of-bounds write in xorg-server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.4%top 70.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8xorg-x11-server-Xdmx1.20.11-22.el8ALSA-2024:2995
AlmaLinux:9xorg-x11-server-Xdmx1.20.11-24.el9ALSA-2024:2169
AlmaLinux:8xorg-x11-server-Xephyr1.20.11-22.el8ALSA-2024:2995
AlmaLinux:9xorg-x11-server-Xephyr1.20.11-24.el9ALSA-2024:2169
AlmaLinux:8xorg-x11-server-Xnest1.20.11-22.el8ALSA-2024:2995
AlmaLinux:9xorg-x11-server-Xnest1.20.11-24.el9ALSA-2024:2169
AlmaLinux:8xorg-x11-server-Xorg1.20.11-22.el8ALSA-2024:2995
AlmaLinux:9xorg-x11-server-Xorg1.20.11-24.el9ALSA-2024:2169
AlmaLinux:8xorg-x11-server-Xvfb1.20.11-22.el8ALSA-2024:2995
AlmaLinux:9xorg-x11-server-Xvfb1.20.11-24.el9ALSA-2024:2169
AlmaLinux:8xorg-x11-server-Xwayland21.1.3-15.el8ALSA-2024:2996
AlmaLinux:9xorg-x11-server-Xwayland22.1.9-5.el9ALSA-2024:2170
AlmaLinux:8xorg-x11-server-common1.20.11-22.el8ALSA-2024:2995
AlmaLinux:9xorg-x11-server-common1.20.11-24.el9ALSA-2024:2169
AlmaLinux:8xorg-x11-server-devel1.20.11-22.el8ALSA-2024:2995
AlmaLinux:9xorg-x11-server-devel1.20.11-24.el9ALSA-2024:2169
AlmaLinux:8xorg-x11-server-source1.20.11-22.el8ALSA-2024:2995
AlmaLinux:9xorg-x11-server-source1.20.11-24.el9ALSA-2024:2169
Alpine:v3.20xorg-server21.1.11-r0ALPINE-CVE-2024-0409
Alpine:v3.21xorg-server21.1.11-r0ALPINE-CVE-2024-0409
Alpine:v3.22xorg-server21.1.11-r0ALPINE-CVE-2024-0409
Alpine:v3.23xorg-server21.1.11-r0ALPINE-CVE-2024-0409
Alpine:v3.24xorg-server21.1.11-r0ALPINE-CVE-2024-0409
Alpine:v3.20xwayland23.2.4-r0ALPINE-CVE-2024-0409
Alpine:v3.21xwayland23.2.4-r0ALPINE-CVE-2024-0409
Alpine:v3.22xwayland23.2.4-r0ALPINE-CVE-2024-0409
Alpine:v3.23xwayland23.2.4-r0ALPINE-CVE-2024-0409
Alpine:v3.24xwayland23.2.4-r0ALPINE-CVE-2024-0409
Debian:12xorg-server2:21.1.7-3+deb12u5DSA-5603-1
Debian:12xorg-server2:21.1.7-3+deb12u5DEBIAN-CVE-2024-0409
Debian:13xorg-server2:21.1.11-1DEBIAN-CVE-2024-0409
Debian:14xorg-server2:21.1.11-1DEBIAN-CVE-2024-0409
Debian:12xwaylandno fix listedDEBIAN-CVE-2024-0409
Debian:13xwayland2:23.2.4-1DEBIAN-CVE-2024-0409
Debian:14xwayland2:23.2.4-1DEBIAN-CVE-2024-0409
Ubuntu:22.04:LTSxorg-server2:21.1.4-2ubuntu1.7~22.04.7UBUNTU-CVE-2024-0409
Ubuntu:22.04:LTSxorg-server2:21.1.4-2ubuntu1.7~22.04.7USN-6587-1
Ubuntu:22.04:LTSxwayland2:22.1.1-1ubuntu0.10USN-6587-1
Ubuntu:22.04:LTSxwayland2:22.1.1-1ubuntu0.10UBUNTU-CVE-2024-0409
Ubuntu:24.04:LTSxwayland2:23.2.4-1UBUNTU-CVE-2024-0409

Affected products (as reported)

VendorProductVersions
xorg-server 21.1.0 – before 21.1.11
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References