Home > Vulnerability Database > CVE-2024-0409

Mend.io Vulnerability Database

CVE-2024-0409

Date: January 18, 2024

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

Language: C

Severity Score

7.8

Related Resources (17)

Url: https://access.redhat.com/security/cve/CVE-2024-0409

Url: https://access.redhat.com/errata/RHSA-2024:2170

Url: https://gitlab.freedesktop.org/xorg/xserver/-/commit/2ef0f1116c65d5cb06d7b6d83f8a1aea702c94f7

Url: https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html

Url: https://security-tracker.debian.org/tracker/CVE-2024-0409

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/

Url: https://security.gentoo.org/glsa/202401-30

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-0409

Url: https://access.redhat.com/errata/RHSA-2024:0320

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2257690

Url: https://access.redhat.com/errata/RHSA-2024:2995

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/

Url: https://access.redhat.com/errata/RHSA-2024:2169

Url: https://security.netapp.com/advisory/ntap-20240307-0006/

Url: https://access.redhat.com/errata/RHSA-2024:2996

Url: https://www.mend.io/vulnerability-database/CVE-2024-0409

Severity Score

7.8

Weakness Type (CWE)

Out-of-bounds Write

CWE-787

CVSS v3.1

Base Score:	7.8
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Mend.io Vulnerability Database

We found results for “”

CVE-2024-0409

Date: January 18, 2024

Language: C

Severity Score

Related Resources (17)

Severity Score

Weakness Type (CWE)

CVSS v3.1

Do you need more information?