{"id":112973,"date":"2024-01-18T11:28:03","date_gmt":"2024-01-18T09:28:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej"},"modified":"2024-01-18T11:28:03","modified_gmt":"2024-01-18T09:28:03","slug":"obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej","title":{"rendered":"Update X.Org Server 21.1.11 met oplossing van 6 kwetsbaarheden","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Correctieve uitgaves van X.Org Server 21.1.11 en de DDX-component (Device-Dependent X) xwayland 23.2.4 zijn gepubliceerd, waardoor de uitvoering van X11-applicaties in omgevingen op basis van Wayland mogelijk wordt gemaakt. In de nieuwe versies zijn 6 kwetsbaarheden verholpen, waarvan sommige kunnen worden misbruikt voor privilege-escalatie in systemen waarin de X-server met root-rechten draait, evenals voor externe code-executie in configuraties waarin toegang wordt verkregen via X11-sessie-overdracht met SSH. <\/p>\n
Geconstateerde problemen: <\/p>\n
\n
CVE-2023-6816 \u2014 buffer overflow occurring when passing an incorrect array index in DeviceFocusEvent and ProcXIQueryPointer operations. The vulnerability is caused by the X server allocating memory for the array based on the actual number of buttons, while the request allows values up to 255 to be used in the array. The issue has been present since the release of xorg-server-1.13.0 (2012).\n
CVE-2024-0229 \u2014 out-of-bounds write through rebinding to another master device in a configuration where the device is equipped with both button and key input elements, while the number of buttons (numButtons parameter) is set to 0. The issue has been present since the release of xorg-server-1.1.1 (2006).\n
CVE-2024-21885 \u2014 buffer overflow in the XISendDeviceHierarchyEvent function, occurring when a device with a given identifier is removed and a device with the same identifier is added within a single request. The vulnerability is caused by two instances of the xXIHierarchyInfo structure being written for one identifier during a double operation, while the XISendDeviceHierarchyEvent function allocates memory for one instance. The issue has been present since the release of xorg-server-1.10.0 (2010).\n
CVE-2024-21886 \u2014 buffer overflow in the DisableDevice function, occurring when a master device is disabled while slave devices are already disabled. The vulnerability is caused by an incorrect calculation of the size of the structure used to store the device list. The issue has been present since the release of xorg-server-1.13.0 (2012).\n
CVE-2024-0409, CVE-2024-0408 \u2014 corruption of the SELinux context when enabling xserver_object_manager and launching a client or creating a GLX PBuffer. <\/ul>\n