CVE-2024-0229CWE-787

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

High · published February 9, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01229 · 68.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-02-09T06:29Z
EPSS history
Timeline
  • 09 FEB 06:29Z
    Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    cvelistv5