Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 1.4%
exploitation probability
1.4%top 28% of all CVEs
observed exploitation
nono source reports it
A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
xorg-serverxwaylandRed Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSIONRed Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.6 Extended Update SupportRed Hat · Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.0 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9.2 Extended Update SupportReferences
https://access.redhat.com/errata/RHSA-2024:0320https://access.redhat.com/errata/RHSA-2024:0557https://access.redhat.com/errata/RHSA-2024:0558https://access.redhat.com/errata/RHSA-2024:0597https://access.redhat.com/errata/RHSA-2024:0607https://access.redhat.com/errata/RHSA-2024:0614https://access.redhat.com/errata/RHSA-2024:0617https://access.redhat.com/errata/RHSA-2024:0621https://access.redhat.com/errata/RHSA-2024:0626https://access.redhat.com/errata/RHSA-2024:0629https://access.redhat.com/errata/RHSA-2024:2169https://access.redhat.com/errata/RHSA-2024:2170