CVE-2024-0408
CVE-2024-0408 · Xorg-x11-server: selinux unlabeled glx pbuffer
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.
CVSS 5.5 · Moyenne · EPSS 0,3% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
red hat enterprise linux 7
- Versions du logiciel
- ≥ 0:1.20.4-27.el7_9: Non concernée (rpm)
Aucun correctif publié
red hat enterprise linux 8
- Versions du logiciel
- ≥ 0:1.20.11-22.el8: Non concernée (rpm)
Aucun correctif publié
red hat enterprise linux 8
- Versions du logiciel
- ≥ 0:21.1.3-15.el8: Non concernée (rpm)
Aucun correctif publié
red hat enterprise linux 9
- Versions du logiciel
- ≥ 0:1.20.11-24.el9: Non concernée (rpm)
Aucun correctif publié
red hat enterprise linux 9
- Versions du logiciel
- ≥ 0:22.1.9-5.el9: Non concernée (rpm)
Aucun correctif publié
red hat enterprise linux 6
Aucun correctif publié
red hat enterprise linux 7
Aucun correctif publié
red hat enterprise linux 8
Aucun correctif publié
red hat enterprise linux 9
Aucun correctif publié
xorg-server Debian:12
- Versions du logiciel
- 2:21.1.7-3
- 2:21.1.7-3+deb12u1
- 2:21.1.7-3+deb12u2
- 2:21.1.7-3+deb12u3
- 2:21.1.7-3+deb12u4
- Plages de versions concernées
- ECOSYSTEM: < 2:21.1.7-3+deb12u5
Mettez à jour vers 2:21.1.7-3+deb12u5
xorg-server Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2:21.1.11-1
Mettez à jour vers 2:21.1.11-1
xorg-server Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2:21.1.11-1
Mettez à jour vers 2:21.1.11-1
xwayland Debian:12
- Versions du logiciel
- 2:22.1.9-1
- 2:23.1.0-1
- 2:23.1.1-1
- 2:23.2.0-1
- 2:23.2.1-1
- 2:23.2.2-1
- 2:23.2.3-1
- 2:23.2.4-1
- 2:23.2.6-1
- 2:24.0.99.901-1
- 2:24.1.0-1
- 2:24.1.10-1
- 2:24.1.11-1
- 2:24.1.12-1
- 2:24.1.13-1
- 2:24.1.2-1
- 2:24.1.3-1
- 2:24.1.4-1
- 2:24.1.4-2
- 2:24.1.4-3
- 2:24.1.5-1
- 2:24.1.6-1
- 2:24.1.8-1
- 2:24.1.9-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
xwayland Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2:23.2.4-1
Mettez à jour vers 2:23.2.4-1
xwayland Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2:23.2.4-1
Mettez à jour vers 2:23.2.4-1
xorg-server Ubuntu:Pro:14.04:LTS
- Versions du logiciel
- 2:1.14.3-3ubuntu2
- 2:1.14.3-3ubuntu3
- 2:1.14.3-3ubuntu4
- 2:1.14.3-5ubuntu1
- 2:1.14.4-1ubuntu1
- 2:1.14.4-1ubuntu2
- 2:1.14.4.901-0ubuntu2
- 2:1.14.5-1ubuntu2
- 2:1.14.5-1ubuntu4
- 2:1.15.0-1ubuntu1
- 2:1.15.0-1ubuntu2
- 2:1.15.0-1ubuntu3
- 2:1.15.0-1ubuntu4
- 2:1.15.0-1ubuntu6
- 2:1.15.0-1ubuntu7
- 2:1.15.1-0ubuntu1
- 2:1.15.1-0ubuntu2
- 2:1.15.1-0ubuntu2.1
- 2:1.15.1-0ubuntu2.4
- 2:1.15.1-0ubuntu2.5
- 2:1.15.1-0ubuntu2.6
- 2:1.15.1-0ubuntu2.7
- 2:1.15.1-0ubuntu2.9
- 2:1.15.1-0ubuntu2.10
- 2:1.15.1-0ubuntu2.11
- 2:1.15.1-0ubuntu2.11+esm2
- 2:1.15.1-0ubuntu2.11+esm3
- 2:1.15.1-0ubuntu2.11+esm4
- 2:1.15.1-0ubuntu2.11+esm5
- 2:1.15.1-0ubuntu2.11+esm6
- 2:1.15.1-0ubuntu2.11+esm7
- 2:1.15.1-0ubuntu2.11+esm8
- Plages de versions concernées
- ECOSYSTEM: < 2:1.15.1-0ubuntu2.11+esm9
Mettez à jour vers 2:1.15.1-0ubuntu2.11+esm9
xorg-server Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 2:1.17.2-1ubuntu9
- 2:1.17.2-1ubuntu10
- 2:1.17.3-2ubuntu1
- 2:1.17.3-2ubuntu2
- 2:1.17.3-2ubuntu3
- 2:1.17.3-2ubuntu4
- 2:1.18.1-1ubuntu3
- 2:1.18.1-1ubuntu4
- 2:1.18.3-1ubuntu1
- 2:1.18.3-1ubuntu2
- 2:1.18.3-1ubuntu2.2
- 2:1.18.3-1ubuntu2.3
- 2:1.18.4-0ubuntu0.1
- 2:1.18.4-0ubuntu0.2
- 2:1.18.4-0ubuntu0.3
- 2:1.18.4-0ubuntu0.4
- 2:1.18.4-0ubuntu0.6
- 2:1.18.4-0ubuntu0.7
- 2:1.18.4-0ubuntu0.8
- 2:1.18.4-0ubuntu0.9
- 2:1.18.4-0ubuntu0.10
- 2:1.18.4-0ubuntu0.11
- 2:1.18.4-0ubuntu0.12
- 2:1.18.4-0ubuntu0.12+esm1
- 2:1.18.4-0ubuntu0.12+esm2
- 2:1.18.4-0ubuntu0.12+esm4
- 2:1.18.4-0ubuntu0.12+esm5
- 2:1.18.4-0ubuntu0.12+esm6
- 2:1.18.4-0ubuntu0.12+esm8
- Plages de versions concernées
- ECOSYSTEM: < 2:1.18.4-0ubuntu0.12+esm9
Mettez à jour vers 2:1.18.4-0ubuntu0.12+esm9
xorg-server-hwe-16.04 Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 2:1.18.4-1ubuntu6.1~16.04.1
- 2:1.18.4-1ubuntu6.1~16.04.2
- 2:1.19.3-1ubuntu1~16.04.2
- 2:1.19.3-1ubuntu1~16.04.3
- 2:1.19.3-1ubuntu1~16.04.4
- 2:1.19.5-0ubuntu2~16.04.1
- 2:1.19.6-1ubuntu4~16.04.1
- 2:1.19.6-1ubuntu4.1~16.04.1
- 2:1.19.6-1ubuntu4.1~16.04.2
- 2:1.19.6-1ubuntu4.1~16.04.3
- 2:1.19.6-1ubuntu4.1~16.04.4
- 2:1.19.6-1ubuntu4.1~16.04.5
- 2:1.19.6-1ubuntu4.1~16.04.6
- 2:1.19.6-1ubuntu4.1~16.04.6+esm1
- 2:1.19.6-1ubuntu4.1~16.04.6+esm3
- 2:1.19.6-1ubuntu4.1~16.04.6+esm4
- 2:1.19.6-1ubuntu4.1~16.04.6+esm5
- 2:1.19.6-1ubuntu4.1~16.04.6+esm6
- 2:1.19.6-1ubuntu4.1~16.04.6+esm7
- 2:1.19.6-1ubuntu4.1~16.04.6+esm8
- 2:1.19.6-1ubuntu4.1~16.04.6+esm9
- 2:1.19.6-1ubuntu4.1~16.04.6+esm10
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
xorg-server Ubuntu:Pro:18.04:LTS
- Versions du logiciel
- 2:1.19.5-0ubuntu2
- 2:1.19.6-1ubuntu1
- 2:1.19.6-1ubuntu2
- 2:1.19.6-1ubuntu3
- 2:1.19.6-1ubuntu4
- 2:1.19.6-1ubuntu4.1
- 2:1.19.6-1ubuntu4.2
- 2:1.19.6-1ubuntu4.3
- 2:1.19.6-1ubuntu4.4
- 2:1.19.6-1ubuntu4.5
- 2:1.19.6-1ubuntu4.6
- 2:1.19.6-1ubuntu4.7
- 2:1.19.6-1ubuntu4.8
- 2:1.19.6-1ubuntu4.9
- 2:1.19.6-1ubuntu4.10
- 2:1.19.6-1ubuntu4.11
- 2:1.19.6-1ubuntu4.12
- 2:1.19.6-1ubuntu4.13
- 2:1.19.6-1ubuntu4.14
- 2:1.19.6-1ubuntu4.15
- 2:1.19.6-1ubuntu4.15+esm1
- 2:1.19.6-1ubuntu4.15+esm3
- Plages de versions concernées
- ECOSYSTEM: < 2:1.19.6-1ubuntu4.15+esm4
Mettez à jour vers 2:1.19.6-1ubuntu4.15+esm4
xorg-server-hwe-18.04 Ubuntu:Pro:18.04:LTS
- Versions du logiciel
- 2:1.20.1-3ubuntu2.1~18.04.1
- 2:1.20.4-1ubuntu3~18.04.1
- 2:1.20.5+git20191008-0ubuntu1~18.04.1
- 2:1.20.8-2ubuntu2.1~18.04.1
- 2:1.20.8-2ubuntu2.2~18.04.1
- 2:1.20.8-2ubuntu2.2~18.04.2
- 2:1.20.8-2ubuntu2.2~18.04.3
- 2:1.20.8-2ubuntu2.2~18.04.4
- 2:1.20.8-2ubuntu2.2~18.04.5
- 2:1.20.8-2ubuntu2.2~18.04.6
- 2:1.20.8-2ubuntu2.2~18.04.7
- 2:1.20.8-2ubuntu2.2~18.04.8
- 2:1.20.8-2ubuntu2.2~18.04.9
- 2:1.20.8-2ubuntu2.2~18.04.10
- 2:1.20.8-2ubuntu2.2~18.04.11
- 2:1.20.8-2ubuntu2.2~18.04.11+esm1
- 2:1.20.8-2ubuntu2.2~18.04.11+esm2
- 2:1.20.8-2ubuntu2.2~18.04.11+esm3
- 2:1.20.8-2ubuntu2.2~18.04.11+esm4
- 2:1.20.8-2ubuntu2.2~18.04.11+esm5
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
xorg-server Ubuntu:20.04:LTS
- Versions du logiciel
- 2:1.20.5+git20191008-0ubuntu1
- 2:1.20.6-1ubuntu1
- 2:1.20.7-2ubuntu1
- 2:1.20.7-2ubuntu2
- 2:1.20.8-2ubuntu2
- 2:1.20.8-2ubuntu2.1
- 2:1.20.8-2ubuntu2.2
- 2:1.20.8-2ubuntu2.3
- 2:1.20.8-2ubuntu2.4
- 2:1.20.8-2ubuntu2.6
- 2:1.20.9-2ubuntu1.1~20.04.1
- 2:1.20.9-2ubuntu1.2~20.04.1
- 2:1.20.9-2ubuntu1.2~20.04.2
- 2:1.20.11-1ubuntu1~20.04.2
- 2:1.20.13-1ubuntu1~20.04.2
- 2:1.20.13-1ubuntu1~20.04.3
- 2:1.20.13-1ubuntu1~20.04.4
- 2:1.20.13-1ubuntu1~20.04.5
- 2:1.20.13-1ubuntu1~20.04.6
- 2:1.20.13-1ubuntu1~20.04.8
- 2:1.20.13-1ubuntu1~20.04.9
- 2:1.20.13-1ubuntu1~20.04.12
- Plages de versions concernées
- ECOSYSTEM: < 2:1.20.13-1ubuntu1~20.04.14
Mettez à jour vers 2:1.20.13-1ubuntu1~20.04.14
xorg-server Ubuntu:22.04:LTS
- Versions du logiciel
- 2:1.20.13-1ubuntu1
- 2:1.20.13-1ubuntu2
- 2:1.20.14-1ubuntu1
- 2:21.1.3-2ubuntu2
- 2:21.1.3-2ubuntu2.1
- 2:21.1.3-2ubuntu2.2
- 2:21.1.3-2ubuntu2.3
- 2:21.1.3-2ubuntu2.4
- 2:21.1.3-2ubuntu2.5
- 2:21.1.3-2ubuntu2.6
- 2:21.1.3-2ubuntu2.7
- 2:21.1.3-2ubuntu2.8
- 2:21.1.3-2ubuntu2.9
- 2:21.1.4-2ubuntu1.7~22.04.1
- 2:21.1.4-2ubuntu1.7~22.04.2
- 2:21.1.4-2ubuntu1.7~22.04.5
- Plages de versions concernées
- ECOSYSTEM: < 2:21.1.4-2ubuntu1.7~22.04.7
Mettez à jour vers 2:21.1.4-2ubuntu1.7~22.04.7
xwayland Ubuntu:22.04:LTS
- Versions du logiciel
- 2:21.1.2-0ubuntu1
- 2:21.1.3-1
- 2:21.1.3-1ubuntu1
- 2:21.1.4-1
- 2:22.1.0-1
- 2:22.1.1-1
- 2:22.1.1-1ubuntu0.1
- 2:22.1.1-1ubuntu0.2
- 2:22.1.1-1ubuntu0.3
- 2:22.1.1-1ubuntu0.4
- 2:22.1.1-1ubuntu0.5
- 2:22.1.1-1ubuntu0.6
- 2:22.1.1-1ubuntu0.7
- 2:22.1.1-1ubuntu0.9
- Plages de versions concernées
- ECOSYSTEM: < 2:22.1.1-1ubuntu0.10
Mettez à jour vers 2:22.1.1-1ubuntu0.10
xwayland Ubuntu:24.04:LTS
- Versions du logiciel
- 2:23.2.0-1
- 2:23.2.0-1ubuntu0.1
- 2:23.2.3-1
- Plages de versions concernées
- ECOSYSTEM: < 2:23.2.4-1
Mettez à jour vers 2:23.2.4-1
Sources originales
- https://access.redhat.com/errata/RHSA-2024:0320
- https://access.redhat.com/errata/RHSA-2024:2169
- https://access.redhat.com/errata/RHSA-2024:2170
- https://access.redhat.com/errata/RHSA-2024:2995
- https://access.redhat.com/errata/RHSA-2024:2996
- https://access.redhat.com/security/cve/CVE-2024-0408
- https://bugzilla.redhat.com/show_bug.cgi?id=2257689
- https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html
- https://lists.fedoraproject.org/archives/list/[email protected]/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/
- https://security.gentoo.org/glsa/202401-30
- https://security.netapp.com/advisory/ntap-20240307-0006/
- https://nvd.nist.gov/vuln/detail/CVE-2024-0408