CVEvulnerability
CVE-2024-21886
7.8 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2024-02-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-122
Description
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
Related
Weakness · CWE (1)
- CWE-122 Heap-based Buffer Overflow weakness
References
- https://access.redhat.com/errata/RHSA-2024:0320 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0557 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0558 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0597 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0607 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0614 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0617 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0621 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0626 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0629 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2169 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2170 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2995 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2996 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:12751 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2024-21886 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2256542 bugzilla.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0320 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0557 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0558 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0597 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0607 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0614 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0617 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0621 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0626 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:0629 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2169 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2170 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2995 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2996 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2024-21886 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2256542 bugzilla.redhat.com
- https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/TZ2IJJDHJETNE76VUX4G7UI5EG5HYFEH/ lists.fedoraproject.org