Xorg-x11-server: selinux context corruption
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.8epss 0.4%
probabilidad de explotación
0.4%top 73% de las CVE
explotación observada
noninguna fuente lo reporta
A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
xorg-serverRed Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 9Referencias
https://access.redhat.com/errata/RHSA-2024:0320https://access.redhat.com/errata/RHSA-2024:2169https://access.redhat.com/errata/RHSA-2024:2170https://access.redhat.com/errata/RHSA-2024:2995https://access.redhat.com/errata/RHSA-2024:2996https://access.redhat.com/security/cve/CVE-2024-0409https://bugzilla.redhat.com/show_bug.cgi?id=2257690https://lists.debian.org/debian-lts-announce/2024/01/msg00016.htmlhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/https://security.gentoo.org/glsa/202401-30