Red Hat Security Advisory

RHSA-2024:2995

xorg-x11-server security update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) xorg-x11-server-1.20.11-22.el8, xorg-x11-server-Xdmx-1.20.11-22.el8, xorg-x11-server-Xephyr-1.20.11-22.el8 +4
Red Hat Enterprise Linux CRB (v. 8) xorg-x11-server-devel-1.20.11-22.el8, xorg-x11-server-source-1.20.11-22.el8

Fixes 10 records

TI-2023-06228 CVE-2023-6816 · GHSA-pcjv-393q-rqf2

Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

MEDIUM 46

A flaw was found in X.Org server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02106 Published 2024-01-18 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787

TI-2024-14548 CVE-2024-21886 · GHSA-vx3h-cj8w-2h2c

Xorg-x11-server: heap buffer overflow in disabledevice

MEDIUM 43

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0142 Published 2024-02-28 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-122

TI-2023-05938 CVE-2023-6478 · GHSA-fwrj-5c8f-f8h2

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

MEDIUM 43

A flaw was found in xorg-server.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.01617 Published 2023-12-13 Partial fix · 1.1.0-25.el6_10.13, 1.8.0-28.el7_9 +13 CWE-190

TI-2024-14547 CVE-2024-21885 · GHSA-2x93-8973-5mgq

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

LOW 39

A flaw was found in X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0142 Published 2024-02-28 Partial fix · 21.1.11, 23.2.4 +15 CWE-122

TI-2024-00205 CVE-2024-0229 · GHSA-49wx-9h9f-8c9g

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

LOW 39

An out-of-bounds memory access flaw was found in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01229 Published 2024-02-09 Partial fix · 21.1.11, 1.1.0-25.el6_10.13 +14 CWE-787

TI-2023-05853 CVE-2023-6377 · GHSA-xp6x-8hgv-x5w5

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

LOW 39

A flaw was found in xorg-server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01574 Published 2023-12-13 Partial fix · 1.1.0-25.el6_10.14, 1.8.0-28.el7_9 +13 CWE-125

TI-2023-04938 CVE-2023-5367 · GHSA-q38f-wwqq-rr3v

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

LOW 35

A out-of-bounds write flaw was found in the xorg-x11-server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00608 Published 2023-10-25 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-24.el7_9 +14 CWE-787

TI-2024-00371 CVE-2024-0409 · GHSA-w668-xcxf-v3gg

Xorg-x11-server: selinux context corruption

LOW 34

A flaw was found in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00356 Published 2024-01-18 Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-787

TI-2024-00370 CVE-2024-0408 · GHSA-rcj8-jx65-7c4r

Xorg-x11-server: selinux unlabeled glx pbuffer

LOW 25

A flaw was found in the X.Org server.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00321 Published 2024-01-18 Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-158

TI-2023-04951 CVE-2023-5380 · GHSA-294c-hpxh-5qrx

Xorg-x11-server: use-after-free bug in destroywindow

LOW 23

A use-after-free flaw was found in the xorg-x11-server.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.007 Published 2023-10-25 Partial fix · 1.8.0-26.el7_9, 1.20.11-22.el8 +3 CWE-416