kbrain

CVE-2024-0229

HIGH · CVSS 7.8EPSS 1.2%EU EUVD

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.

Key facts

CVSS score
7.8 (v3.1)
Severity
HIGH
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-787
EPSS score
1.2% (68th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2024-16027)
Published
February 9, 2024
NVD last modified
June 17, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2024-16027 in the EU Vulnerability Database. Last updated in EUVD on November 6, 2025.

View on the EU Vulnerability Database

Affected products

  • fedoraproject / fedora
  • redhat / enterprise linux
  • redhat / enterprise linux
  • redhat / enterprise linux
  • redhat / enterprise linux aus
  • redhat / enterprise linux aus
  • redhat / enterprise linux eus
  • redhat / enterprise linux eus
  • redhat / enterprise linux eus
  • redhat / enterprise linux eus
  • redhat / enterprise linux tus
  • redhat / enterprise linux tus
  • redhat / enterprise linux update services for sap solutions
  • redhat / enterprise linux update services for sap solutions
  • x.org / x server
  • x.org / xwayland

Certified products that may be affected

33 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

See all 33 in the Security Certifications Explorer.

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain