Lucene search
Alpine Linux Development TeamALPINE:CVE-2024-21886HistoryFeb 28, 2024 - 1:15 p.m.
CVE-2024-21886
2024-02-2813:15:08
Alpine Linux Development Team
security.alpinelinux.org
17
cve-2024-21886
x.org server
disabledevice function
heap buffer overflow
application crash
remote code execution
ssh x11 forwarding
unix
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0
Percentile
10.3%
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | xorg-server | < 21.1.11-r0 | UNKNOWN |
| Alpine | edge-community | noarch | xwayland | < 23.2.4-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | xorg-server | < 21.1.11-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | xwayland | < 23.2.4-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | xorg-server | < 21.1.11-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | xwayland | < 23.2.4-r0 | UNKNOWN |
Related
ubuntucve
ubuntucve
CVE-2024-21886
2024-01-16 00:00:00
nvd
nvd
CVE-2024-21886
2024-02-28 13:15:08
redhatcve
redhatcve
CVE-2024-21886
2024-01-18 04:35:38
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-2815d55cdf)
2024-01-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0121-1)
2024-01-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0116-1)
2024-01-18 00:00:00
cgr
cgr
CVE-2024-21886 vulnerabilities
2024-05-19 03:07:16
cbl_mariner
cbl_mariner
cve
cve
CVE-2024-21886
2024-02-28 13:15:08
fedora
fedora
[SECURITY] Fedora 39 Update: xorg-x11-server-1.20.14-30.fc39
2024-01-22 01:16:01
[SECURITY] Fedora 39 Update: tigervnc-1.13.1-11.fc39
2024-01-22 01:16:00
[SECURITY] Fedora 39 Update: xorg-x11-server-1.20.14-29.fc39
2024-01-22 01:16:00
debiancve
debiancve
CVE-2024-21886
2024-02-28 13:15:08
osv
osv
CGA-q773-qqrq-gj54
2024-06-06 12:28:59
Important: tigervnc security update
2024-01-30 00:00:00
Important: tigervnc security update
2024-02-12 20:17:26
cvelist
cvelist
CVE-2024-21886 Xorg-x11-server: heap buffer overflow in disabledevice
2024-02-28 12:13:12
zdi
zdi
prion
prion
Heap overflow
2024-02-28 13:15:00
nessus
nessus
CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2024-21886)
2024-09-21 00:00:00
Fedora 39 : xorg-x11-server (2024-2815d55cdf)
2024-01-21 00:00:00
CentOS 8 : tigervnc (CESA-2024:0607)
2024-01-30 00:00:00
vulnrichment
vulnrichment
CVE-2024-21886 Xorg-x11-server: heap buffer overflow in disabledevice
2024-02-28 12:13:12
wolfi
wolfi
CVE-2024-21886 vulnerabilities
2024-10-01 21:13:23
redhat
redhat
(RHSA-2024:0597) Important: tigervnc security update
2024-01-30 13:42:23
(RHSA-2024:0629) Important: tigervnc security update
2024-01-31 08:20:49
(RHSA-2024:0558) Important: tigervnc security update
2024-01-30 10:44:41
freebsd
freebsd
xorg server -- Multiple vulnerabilities
2024-01-16 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2352
2024-02-20 09:34:57
Advisory ROSA-SA-2024-2351
2024-02-20 09:31:11
almalinux
almalinux
Important: tigervnc security update
2024-01-30 00:00:00
Important: tigervnc security update
2024-01-30 00:00:00
Moderate: xorg-x11-server-Xwayland security update
2024-05-22 00:00:00
rocky
rocky
tigervnc security update
2024-02-12 20:17:26
oraclelinux
oraclelinux
tigervnc security update
2024-01-31 00:00:00
tigervnc security update
2024-01-31 00:00:00
tigervnc security update
2024-02-01 00:00:00
amazon
amazon
Important: xorg-x11-server
2024-04-25 16:04:00
Important: xorg-x11-server
2024-02-15 03:52:00
centos
centos
tigervnc security update
2024-02-05 19:31:03
xorg security update
2024-01-26 18:10:28
ubuntu
ubuntu
X.Org X Server vulnerabilities
2024-01-22 00:00:00
X.Org X Server regression
2024-02-01 00:00:00
X.Org X Server vulnerabilities
2024-01-16 00:00:00
redos
redos
ROS-20240329-09
2024-03-29 00:00:00
slackware
slackware
[slackware-security] xorg-server
2024-01-16 20:56:51
[slackware-security] tigervnc
2024-01-21 20:53:54
debian
debian
[SECURITY] [DLA 3721-1] xorg-server security update
2024-01-25 21:54:59
[SECURITY] [DSA 5603-1] xorg-server security update
2024-01-23 19:51:42
mageia
mageia
Updated x11-server, x11-server-xwayland and tigervnc fix security issues
2024-02-04 05:49:27
gentoo
gentoo
X.Org X Server, XWayland: Multiple Vulnerabilities
2024-01-31 00:00:00
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0
Percentile
10.3%
Related for ALPINE:CVE-2024-21886