CVE-2024-21886CWE-122

Xorg-x11-server: heap buffer overflow in disabledevice

High · published February 28, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01420 · 72.6th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2024-02-28T12:13Z
EPSS history
Timeline
  • 28 FEB 12:13Z
    Xorg-x11-server: heap buffer overflow in disabledevice
    cvelistv5