CVE-2024-0229

    Dashboard / Vulnerabilities / CVE-2024-0229

    CVE-2024-0229

    Published: 9 Feb 2024Last Modified: 28 Oct 2026

    Summary: Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

    Details: An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.

    References: https://access.redhat.com/downloads/content/package-browser/, https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html, https://lists.fedoraproject.org/archives/list/[email protected]/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/, https://lists.fedoraproject.org/archives/list/[email protected]/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/, https://lists.fedoraproject.org/archives/list/[email protected]/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/, https://access.redhat.com/errata/RHSA-2024:0320, https://access.redhat.com/errata/RHSA-2024:0557, https://access.redhat.com/errata/RHSA-2024:0558, https://access.redhat.com/errata/RHSA-2024:0597, https://access.redhat.com/errata/RHSA-2024:0607, https://access.redhat.com/errata/RHSA-2024:0614, https://access.redhat.com/errata/RHSA-2024:0617, https://access.redhat.com/errata/RHSA-2024:0621, https://access.redhat.com/errata/RHSA-2024:0626, https://access.redhat.com/errata/RHSA-2024:0629, https://access.redhat.com/errata/RHSA-2024:2169, https://access.redhat.com/errata/RHSA-2024:2170, https://access.redhat.com/errata/RHSA-2024:2995, https://access.redhat.com/errata/RHSA-2024:2996, https://access.redhat.com/errata/RHSA-2025:12751, https://access.redhat.com/security/cve/CVE-2024-0229, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0229.json, https://nvd.nist.gov/vuln/detail/CVE-2024-0229, https://bugzilla.redhat.com/show_bug.cgi?id=2256690, https://gitlab.freedesktop.org/xorg/xserver

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 2a327e58609e2bf53a9043eab4b36bc64168197a
    Fixed -31407c0199da877b359b2e37bb371804321279b7

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-0229 | CVE-DB