7.8
High
CVE-2024-21886 Xorg-x11-server: heap buffer overflow in disabledevice
Description
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| xserver | Versions not published | |
| xwayland | Versions not published | |
| Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | Versions not published |
Show the 8 other branches Hide the 8 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 8.6 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.8 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9.2 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published |