This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2024-21886 →
Unrated
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circu...
ALPINE-CVE-2024-21886
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Alpine:v3.19xorg-server |
< 21.1.11-r0→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.20xorg-server |
< 21.1.11-r0→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.21xorg-server |
< 21.1.11-r0→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.22xorg-server |
< 21.1.11-r0→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.23xorg-server |
< 21.1.11-r0→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.24xorg-server |
< 21.1.11-r0→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.19xwayland |
< 23.2.4-r0→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.20xwayland |
< 23.2.4-r0→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.21xwayland |
< 23.2.4-r0→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.22xwayland |
< 23.2.4-r0→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.23xwayland |
< 23.2.4-r0→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.24xwayland |
< 23.2.4-r0→ 23.2.4-r0 |
23.2.4-r0 |
Original description The description as published by the source.
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory security.alpinelinux.org