CVE-2024-0229: Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.
Other sources
An out-of-bounds memory access may occur when a device frozen by a sync grab is reattached to a different master device. The number of buttons is incorrectly calculated to be zero and this can be exploited for LPE if the server runs with extended privileges or RCE for ssh x11 forwarding.
This was reported as ZDI-CAN-22678 to the xorg-security list.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/xorg-serverto a version that resolves this vulnerability.Fixed in 21.1.11 - Upgrade
Upgrade
redhat/xwaylandto a version that resolves this vulnerability.Fixed in 23.2.4 - Upgrade
Upgrade
alpine/xorg-serverto a version that resolves this vulnerability.Fixed in 21.1.11-r0 - Upgrade
Upgrade
alpine/xwaylandto a version that resolves this vulnerability.Fixed in 23.2.4-r0 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.7-3+deb12u5 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.11-1 - Upgrade
Upgrade
debian/xwaylandto a version that resolves this vulnerability.Fixed in 2:23.2.4-1 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.7-3+deb12u12Fixed in 2:21.1.7-3+deb12u13Fixed in 2:21.1.16-1.3+deb13u3Fixed in 2:21.1.16-1.3+deb13u4Fixed in 2:21.1.25-2Fixed in 2:21.1.26-1 - Upgrade
Upgrade
debian/xwaylandto a version that resolves this vulnerability.Fixed in 2:24.1.6-1Fixed in 2:24.1.14-1Fixed in 2:24.1.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0229?
CVE-2024-0229 is classified as a high severity vulnerability due to its potential for local privilege escalation and application crashes.
How do I fix CVE-2024-0229?
To fix CVE-2024-0229, upgrade the affected packages to the patched versions specified by your distribution, such as xorg-server 21.1.11 or xwayland 23.2.4.
Which versions are affected by CVE-2024-0229?
CVE-2024-0229 affects several versions of xorg-server and xwayland, specifically versions prior to 21.1.11 for xorg-server and 23.2.4 for xwayland.
What could happen if CVE-2024-0229 is exploited?
Exploiting CVE-2024-0229 could result in application crashes or allow an attacker to gain elevated privileges on the affected system.
Is CVE-2024-0229 specific to a particular operating system?
CVE-2024-0229 primarily affects Red Hat and Debian distributions but the underlying X.Org server vulnerabilities can impact various systems using these components.