CVE-2024-0229: Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

Published Jan 3, 2024
·
Updated

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.

Other sources

An out-of-bounds memory access may occur when a device frozen by a sync grab is reattached to a different master device. The number of buttons is incorrectly calculated to be zero and this can be exploited for LPE if the server runs with extended privileges or RCE for ssh x11 forwarding.

This was reported as ZDI-CAN-22678 to the xorg-security list.

Red Hat

Affected Software

20 affected componentsFixes available
redhat/xorg-server<21.1.11
21.1.11
redhat/xwayland<23.2.4
23.2.4
debian/xorg-server
2:1.20.11-1+deb11u132:1.20.11-1+deb11u152:21.1.7-3+deb12u92:21.1.16-1
debian/xwayland<=2:22.1.9-1
2:24.1.6-1
X.Org X Server<21.1.11
X.Org Xwayland<23.2.4
Fedoraproject Fedora=39
redhat Enterprise Linux=7.0
redhat Enterprise Linux=8.0
redhat Enterprise Linux=9.0
redhat Enterprise Linux Aus=8.2
redhat Enterprise Linux Aus=8.4
redhat Enterprise Linux Eus=8.6
redhat Enterprise Linux Eus=8.8
redhat Enterprise Linux Eus=9.0
redhat Enterprise Linux Eus=9.2
redhat Enterprise Linux Tus=8.2
redhat Enterprise Linux Tus=8.4
redhat Enterprise Linux Update Services For Sap Solutions=8.2
redhat Enterprise Linux Update Services For Sap Solutions=8.4

Event History

Jan 3, 2024
Data Sourced
via Red Hat·10:10 PM
DescriptionSeverityAffected Software
Feb 9, 2024
CVE Published
via MITRE·06:29 AM
Data Sourced
via MITRE·06:29 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeaknessAffected Software
May 31, 2024
Data Sourced
via Launchpad·05:29 PM
Description
Oct 22, 2024
Data Sourced
via Ubuntu·05:51 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-0229?

CVE-2024-0229 is classified as a high severity vulnerability due to its potential for local privilege escalation and application crashes.

2

How do I fix CVE-2024-0229?

To fix CVE-2024-0229, upgrade the affected packages to the patched versions specified by your distribution, such as xorg-server 21.1.11 or xwayland 23.2.4.

3

Which versions are affected by CVE-2024-0229?

CVE-2024-0229 affects several versions of xorg-server and xwayland, specifically versions prior to 21.1.11 for xorg-server and 23.2.4 for xwayland.

4

What could happen if CVE-2024-0229 is exploited?

Exploiting CVE-2024-0229 could result in application crashes or allow an attacker to gain elevated privileges on the affected system.

5

Is CVE-2024-0229 specific to a particular operating system?

CVE-2024-0229 primarily affects Red Hat and Debian distributions but the underlying X.Org server vulnerabilities can impact various systems using these components.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203