Xorg-x11-server: selinux unlabeled glx pbuffer (xorg-server)
En bref
- Source
- NVD
- EPSS
- EPSS 0.32 % · centile 25 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- redhat
- Statut NVD
- Modified
Description
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.
Faiblesses (CWE)
- CWE-158 — Improper Neutralization of Null Byte or NUL Character
Références
- https://access.redhat.com/errata/RHSA-2024:0320
- https://access.redhat.com/errata/RHSA-2024:2169
- https://access.redhat.com/errata/RHSA-2024:2170
- https://access.redhat.com/errata/RHSA-2024:2995
- https://access.redhat.com/errata/RHSA-2024:2996
- https://access.redhat.com/security/cve/CVE-2024-0408
- https://bugzilla.redhat.com/show_bug.cgi?id=2257689
- https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/
- https://security.gentoo.org/glsa/202401-30
- https://security.netapp.com/advisory/ntap-20240307-0006/
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | redhat |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · secalert@redhat.com (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2024-16203
- GCVE · GCVE-0-2024-0408
Configurations affectées (CPE NVD)
cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*< 1.13.1cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*< 21.1.11cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*< 23.2.4cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| xorg-server | affected 21.1.0 < 21.1.11 |
| Red Hat · Red Hat Enterprise Linux 7 | unaffected 0:1.20.4-27.el7_9 < * |
| Red Hat · Red Hat Enterprise Linux 8 | unaffected 0:1.20.11-22.el8 < * |
| Red Hat · Red Hat Enterprise Linux 8 | unaffected 0:21.1.3-15.el8 < * |
| Red Hat · Red Hat Enterprise Linux 9 | unaffected 0:1.20.11-24.el9 < * |
| Red Hat · Red Hat Enterprise Linux 9 | unaffected 0:22.1.9-5.el9 < * |
| Red Hat · Red Hat Enterprise Linux 6 | |
| Red Hat · Red Hat Enterprise Linux 6 | |
| Red Hat · Red Hat Enterprise Linux 7 | |
| Red Hat · Red Hat Enterprise Linux 8 | |
| Red Hat · Red Hat Enterprise Linux 9 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |