CVE-2024-0408

MEDIUM
Published Jan 18, 2024 Modified Aug 29, 2025 CWE-158

Description

A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.

Is your site exposed to CVE-2024-0408?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-158 CWE-158

Affected Products

Vendor Product
tigervnc tigervnc
x.org x_server
x.org xwayland
fedoraproject fedora
redhat enterprise_linux
redhat enterprise_linux
redhat enterprise_linux
redhat enterprise_linux
redhat enterprise_linux_desktop
redhat enterprise_linux_for_ibm_z_systems
redhat enterprise_linux_for_power_big_endian
redhat enterprise_linux_for_power_little_endian
redhat enterprise_linux_for_scientific_computing
redhat enterprise_linux_server
redhat enterprise_linux_workstation

References

Frequently Asked Questions

What is CVE-2024-0408? +
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL. It has a CVSS v3.1 base score of 5.5 (MEDIUM).
How severe is CVE-2024-0408? +
CVE-2024-0408 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-0408? +
CVE-2024-0408 affects products from fedoraproject, redhat, tigervnc, x.org, specifically: enterprise_linux, enterprise_linux_desktop, enterprise_linux_for_ibm_z_systems, enterprise_linux_for_power_big_endian, enterprise_linux_for_power_little_endian, enterprise_linux_for_scientific_computing, enterprise_linux_server, enterprise_linux_workstation, fedora, tigervnc, x_server, xwayland. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-0408? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-9648

A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of service (DoS) condition. By …
CVE-2025-47812 10.0

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary …
CVE-2025-14388 9.8

The PhastPress plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read via null byte injection in all versions up …
CVE-2025-55113 9.0

If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support …
CVE-2025-66263 7.5

Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, …
CVE-2025-1936 7.3

jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-0408 — free, no signup required.