PT-2024-1243 · X.Org+9 · X.Org Server+10
Patrick Del Bello
·
Published
2024-01-16
·
Updated
2025-09-15
·
CVE-2024-0409
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
X.Org Server versions prior to 21.1.11
Xwayland versions prior to 23.2.4
Description
A flaw was found in the X.Org server, specifically in the cursor code of Xephyr and Xwayland, which uses the wrong type of private at creation. This issue is related to a buffer overflow in the Privates Handler component of the X Window System X.Org Server, allowing an attacker to execute arbitrary code.
Recommendations
For X.Org Server versions prior to 21.1.11, update to version 21.1.11 or later.
For Xwayland versions prior to 23.2.4, update to version 23.2.4 or later.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Debian
Linuxmint
Red Hat
Red Os
Suse
Ubuntu
X.Org Server
Xwayland