NetSight
IP …
high7.8

CVE-2024-0409

A flaw was found in the X.Org server.

Impact

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

Affected products

VendorProductAffected versions
TigervncTigervnc
before 1.13.1
X.OrgX Server
before 21.1.11
X.OrgXwayland
before 23.2.4
FedoraprojectFedora
Version 39
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0, 9.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux For Ibm Z Systems
Version 7.0
RedhatEnterprise Linux For Power Big Endian
Version 7.0
RedhatEnterprise Linux For Power Little Endian
Version 7.0
RedhatEnterprise Linux For Scientific Computing
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-787

References