{"id":112973,"date":"2024-01-18T11:28:03","date_gmt":"2024-01-18T09:28:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej"},"modified":"2024-01-18T11:28:03","modified_gmt":"2024-01-18T09:28:03","slug":"obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej","title":{"rendered":"Opdatering af X.Org Server 21.1.11 med rettelse af 6 s\u00e5rbarheder","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Der er offentliggjort korrektioner til X.Org Server 21.1.11 og DDX-komponenten (Device-Dependent X) xwayland 23.2.4, som muligg\u00f8r k\u00f8rsel af X.Org Server for at underst\u00f8tte X11-applikationer i Wayland-baserede milj\u00f8er. I de nye versioner er 6 s\u00e5rbarheder rettet, hvoraf nogle kan udnyttes til at h\u00e6ve privilegier i systemer, hvor X-serveren k\u00f8rer med root-adgang, samt til fjernudf\u00f8relse af kode i konfigurationer, hvor der anvendes omdirigering af X11-sessioner via SSH. <\/p>\n
Identificerede problemer: <\/p>\n
\n
CVE-2023-6816 \u2014 buffer overflow occurring when an incorrect array index is passed in the DeviceFocusEvent and ProcXIQueryPointer operations. The vulnerability arises because the X server allocates array memory based on the actual number of buttons, while the request allows using values up to 255 in the array. The issue manifests starting from the release of xorg-server-1.13.0 (2012).\n
CVE-2024-0229 \u2014 out-of-bounds write through rebinding to another master device in a configuration where the device is simultaneously equipped with input elements of the 'button' and 'key' classes, with the number of buttons (numButtons parameter) set to 0. The problem manifests starting from the release of xorg-server-1.1.1 (2006).\n
CVE-2024-21885 \u2014 buffer overflow in the XISendDeviceHierarchyEvent function, occurring when a device with a specified identifier is removed and a device with the same identifier is added within a single request. The vulnerability arises because two instances of the xXIHierarchyInfo structure are written for one identifier during a double operation, while the XISendDeviceHierarchyEvent function allocates memory based on a single instance. The issue manifests starting from the release of xorg-server-1.10.0 (2010).\n
CVE-2024-21886 \u2014 buffer overflow in the DisableDevice function, occurring when a master device is disabled while slave devices are already disabled. The vulnerability arises from incorrect size calculations for the structure that stores the device list. The issue manifests starting from the release of xorg-server-1.13.0 (2012).\n
CVE-2024-0409, CVE-2024-0408 \u2014 SELinux context corruption when enabling xserver_object_manager and launching a client or creating a GLX PBuffer. <\/ul>\n