Out-of-bounds Write

🗓️ 21 Jan 2024 11:28:04Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

X.Org server Out-of-bounds Write vulnerability in Xephyr and Xwaylan

Reporter	Title	Published	Views	Family All 206
Tenable Nessus	Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2024-522)	20 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : xorg-x11-server (ALAS-2024-2455)	19 Feb 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0110: xorg-x11-server-Xwayland (ALINUX3-SA-2024:0110)	14 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0221: xorg-x11-server (ALINUX3-SA-2024:0221)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : xorg-x11-server-Xwayland (CESA-2024:2996)	22 May 202400:00	–	nessus
Tenable Nessus	CentOS 7 : xorg-x11-server (RHSA-2024:0320)	22 Jan 202400:00	–	nessus
Tenable Nessus	Debian dla-3721 : xdmx - security update	25 Jan 202400:00	–	nessus
Tenable Nessus	Debian dsa-5603 : xdmx - security update	23 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2024-1232)	12 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2024-1254)	12 Mar 202400:00	–	nessus

Vulners

Node

x.org xwaylandMatch2:1.20.11-1debian

AND

x.org xwaylandMatch2:1.20.8-2debian

AND

debian debian_linuxMatch999

x.org xwaylandMatch23.2.2-r0os

AND

alpinelinux alpine_linuxMatch3.19

x.org xorg-serverMatch21.1.9-r0os

AND

x.org xorg-serverMatch21.1.8-r3os

AND

alpinelinux alpine_linuxMatch3.19

x.org xwaylandMatch22.1.4-r1os

AND

x.org xwaylandMatch23.1.2-r2os

AND

x.org xwaylandMatch21.1.1-r1os

AND

x.org xwaylandMatch21.1.0-r3os

AND

x.org xwaylandMatch22.1.2-r0os

AND

x.org xwaylandMatch23.1.2-r1os

AND

x.org xwaylandMatch22.1.4-r0os

AND

x.org xwaylandMatch22.1.3-r1os

AND

x.org xwaylandMatch23.1.1-r0os

AND

x.org xwaylandMatch21.1.0-r1os

AND

x.org xwaylandMatch23.2.2-r0os

AND

x.org xwaylandMatch23.2.1-r0os

AND

x.org xwaylandMatch21.1.2-r1os

AND

x.org xwaylandMatch22.1.5-r0os

AND

x.org xwaylandMatch21.1.4-r0os

AND

x.org xwaylandMatch22.1.0-r0os

AND

x.org xwaylandMatch21.1.0-r4os

AND

x.org xwaylandMatch22.1.7-r0os

AND

x.org xwaylandMatch22.1.8-r0os

AND

x.org xwaylandMatch23.1.0-r0os

AND

x.org xwaylandMatch21.1.1-r2os

AND

x.org xwaylandMatch21.1.2-r0os

AND

x.org xwaylandMatch22.1.1-r0os

AND

x.org xwaylandMatch23.1.2-r0os

AND

x.org xwaylandMatch21.1.1-r0os

AND

x.org xwaylandMatch23.2.0-r0os

AND

x.org xwaylandMatch22.1.3-r0os

AND

alpinelinux alpine_linuxMatchedge

x.org xorg-serverMatch21.1.8-r3os

AND

x.org xorg-serverMatch21.1.7-r0os

AND

x.org xorg-serverMatch21.1.3-r1os

AND

x.org xorg-serverMatch1.20.10-r3os

AND

x.org xorg-serverMatch1.20.10-r5os

AND

x.org xorg-serverMatch21.1.6-r0os

AND

x.org xorg-serverMatch21.1.3-r0os

AND

x.org xorg-serverMatch1.20.8-r2os

AND

x.org xorg-serverMatch1.20.12-r0os

AND

x.org xorg-serverMatch1.20.8-r1os

AND

x.org xorg-serverMatch21.1.8-r0os

AND

x.org xorg-serverMatch21.1.6-r1os

AND

x.org xorg-serverMatch21.1.7-r1os

AND

x.org xorg-serverMatch1.20.10-r4os

AND

x.org xorg-serverMatch21.1.4-r1os

AND

x.org xorg-serverMatch21.1.9-r0os

AND

x.org xorg-serverMatch21.1.4-r0os

AND

x.org xorg-serverMatch1.20.7-r0os

AND

x.org xorg-serverMatch21.1.7-r2os

AND

x.org xorg-serverMatch1.20.11-r0os

AND

x.org xorg-serverMatch1.20.8-r0os

AND

x.org xorg-serverMatch1.20.13-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-0409
access	www.access.redhat.com/security/cve/CVE-2024-0409
lists	www.lists.debian.org/debian-lts-announce/2024/01/msg00016.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/
security	www.security.gentoo.org/glsa/202401-30
security	www.security.netapp.com/advisory/ntap-20240307-0006/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2024:0320

22 May 2024 18:44Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.8

EPSS0.00015