CVE-2024-21886
Xorg-x11-server: heap buffer overflow in disabledevice
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.8EPSS 1.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
28 feb 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
xorg-serverRed Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSIONRed Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.6 Extended Update SupportRed Hat · Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.0 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9.2 Extended Update Support¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://access.redhat.com/errata/RHSA-2024:0320https://access.redhat.com/errata/RHSA-2024:0557https://access.redhat.com/errata/RHSA-2024:0558https://access.redhat.com/errata/RHSA-2024:0597https://access.redhat.com/errata/RHSA-2024:0607https://access.redhat.com/errata/RHSA-2024:0614https://access.redhat.com/errata/RHSA-2024:0617https://access.redhat.com/errata/RHSA-2024:0621https://access.redhat.com/errata/RHSA-2024:0626https://access.redhat.com/errata/RHSA-2024:0629https://access.redhat.com/errata/RHSA-2024:2169https://access.redhat.com/errata/RHSA-2024:2170