Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-service conditions follow from this write…
7.8Hoch
CVE-2024-0229Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
Beschreibung
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.
Schwachstellentyp (CWE):
CWE-787
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- RHSA-2024:0320 vendor-advisoryThird Party Advisory
- RHSA-2024:0557 vendor-advisoryThird Party Advisory
- RHSA-2024:0558 vendor-advisoryThird Party Advisory
- RHSA-2024:0597 vendor-advisoryThird Party Advisory
- RHSA-2024:0607 vendor-advisoryThird Party Advisory
- RHSA-2024:0614 vendor-advisoryThird Party Advisory
- RHSA-2024:0617 vendor-advisoryThird Party Advisory
- RHSA-2024:0621 vendor-advisoryThird Party Advisory
- RHSA-2024:0626 vendor-advisoryThird Party Advisory
- RHSA-2024:0629 vendor-advisoryThird Party Advisory
- RHSA-2024:2169 vendor-advisoryThird Party Advisory
- RHSA-2024:2170 vendor-advisoryThird Party Advisory
- RHSA-2024:2995 vendor-advisoryThird Party Advisory
- RHSA-2024:2996 vendor-advisoryThird Party Advisory
- RHSA-2025:12751 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-0229 vdb-entryThird Party Advisory
- RHBZ#2256690 issue-trackingIssue TrackingThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZ…
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3…
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYM…
CPE-Treffer (NVD) (16)
cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*< 21.1.11cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*< 23.2.4cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_aus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_tus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_tus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*