このページは Alpine Linux 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2024-21886 の詳細 →
未評価
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circu...
ALPINE-CVE-2024-21886
SecPulse初出
影響パッケージ
| パッケージ | 影響を受ける版 → 修正版 | |
|---|---|---|
| Alpine:v3.19xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.20xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.21xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.22xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.23xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.24xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.19xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.20xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.21xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.22xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.23xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.24xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
出典: OSV.dev (Open Source Vulnerabilities) OSV
参照URL
- advisory security.alpinelinux.org