Red Hat X.org server CVE-2024-9632 Local Privilege Escalation via Buffer Overflow

Key Information Vulnerability Description CVE Number: CVE-2024-9632 Public Disclosure Date: October 29, 2024 Last Updated Date: October 29, 2024 Severity: Medium Affected Component: X.org server Description: Due to improper tracking of allocated size in , a local attacker can trigger a buffer overflow condition by crafting a special payload, potentially leading to service denial or local privilege escalation. Affected Ranges Affected Red Hat Enterprise Linux Versions: - Red Hat Enterprise Linux 7 - Red Hat Enterprise Linux 8 - Red Hat Enterprise Linux 9 CVSS Score CVSS v3 Base Score: 7.8 Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: High Integrity Impact: High Availability Impact: High Common Questions Why does Red Hat’s CVSS v3 score or impact differ from other vendors? My product is listed as “under investigation” or “affected.” When will Red Hat release a fix? If my product is listed as “not fixed,” what should I do? If my product is listed as “fix delayed,” what should I do? What are mitigations? I have a Red Hat product, but it’s not listed above. Is it affected? Why does my security scanner report this vulnerability on my product, even though my product version is fixed or unaffected? My product is listed as “out of support.” What does this mean? Additional Information External Reference: CVE-2024-9632 NVD Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-9632 FAQ: Frequently asked questions about CVE-2024-9632 Copyright Information Copyright: © 2021 Red Hat, Inc.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat X.org server CVE-2024-9632 Local Privilege Escalation via Buffer Overflow

More from this source