CVE-2024-21885

{"id": "CVE-2024-21885", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-02-28T13:15:08.197", "references": [{"url": "https://access.redhat.com/errata/RHSA-2024:0320", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0557", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0558", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0597", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0607", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0614", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0617", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0621", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0626", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:0629", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2169", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2170", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2995", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2996", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2024-21885", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256540", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en el servidor X.Org. En la funci\u00f3n XISendDeviceHierarchyEvent, es posible exceder la longitud de la matriz asignada cuando se agregan ciertos ID de dispositivo nuevos a la estructura xXIHierarchyInfo. Esto puede desencadenar una condici\u00f3n de desbordamiento de b\u00fafer de almacenamiento din\u00e1mico, lo que puede provocar un bloqueo de la aplicaci\u00f3n o la ejecuci\u00f3n remota de c\u00f3digo en entornos de reenv\u00edo SSH X11."}], "lastModified": "2024-09-16T16:15:13.080", "sourceIdentifier": "secalert@redhat.com"}