CVE-2024-31083
CVE-2024-31083 · Xorg-x11-server: use-after-free in procrenderaddglyphs
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.
CVSS 7.8 · High · EPSS 1.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 6 extended lifecycle support - extension
- Versions
- ≥ 0:1.1.0-25.el6_10.13: Not affected (rpm)
No fix published
red hat enterprise linux 7
- Versions
- ≥ 0:1.20.4-29.el7_9: Not affected (rpm)
No fix published
red hat enterprise linux 7
- Versions
- ≥ 0:1.8.0-33.el7_9: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:1.13.1-2.el8_9.10: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:1.20.11-23.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:1.13.1-10.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:21.1.3-16.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8.2 advanced update support
- Versions
- ≥ 0:1.9.0-15.el8_2.11: Not affected (rpm)
No fix published
red hat enterprise linux 8.2 telecommunications update service
- Versions
- ≥ 0:1.9.0-15.el8_2.11: Not affected (rpm)
No fix published
red hat enterprise linux 8.2 update services for sap solutions
- Versions
- ≥ 0:1.9.0-15.el8_2.11: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 advanced mission critical update support
- Versions
- ≥ 0:1.11.0-8.el8_4.10: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 telecommunications update service
- Versions
- ≥ 0:1.11.0-8.el8_4.10: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 update services for sap solutions
- Versions
- ≥ 0:1.11.0-8.el8_4.10: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support
- Versions
- ≥ 0:1.12.0-6.el8_6.11: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
- Versions
- ≥ 0:1.12.0-15.el8_8.10: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:1.13.1-8.el9_4.3: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:23.2.7-1.el9: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:1.20.11-26.el9: Not affected (rpm)
No fix published
red hat enterprise linux 9.0 extended update support
- Versions
- ≥ 0:1.11.0-22.el9_0.11: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:1.12.0-14.el9_2.8: Not affected (rpm)
No fix published
red hat enterprise linux 10
No fix published
red hat enterprise linux 6
No fix published
xorg-server Debian:12
- Versions
- 2:21.1.7-3
- 2:21.1.7-3+deb12u1
- 2:21.1.7-3+deb12u2
- 2:21.1.7-3+deb12u3
- 2:21.1.7-3+deb12u4
- 2:21.1.7-3+deb12u5
- 2:21.1.7-3+deb12u6
- Affected ranges
- ECOSYSTEM: < 2:21.1.7-3+deb12u7
Update to 2:21.1.7-3+deb12u7
xorg-server Debian:13
- Affected ranges
- ECOSYSTEM: < 2:21.1.11-3
Update to 2:21.1.11-3
Original sources
- https://access.redhat.com/errata/RHSA-2024:1785
- https://access.redhat.com/errata/RHSA-2024:2036
- https://access.redhat.com/errata/RHSA-2024:2037
- https://access.redhat.com/errata/RHSA-2024:2038
- https://access.redhat.com/errata/RHSA-2024:2039
- https://access.redhat.com/errata/RHSA-2024:2040
- https://access.redhat.com/errata/RHSA-2024:2041
- https://access.redhat.com/errata/RHSA-2024:2042
- https://access.redhat.com/errata/RHSA-2024:2080
- https://access.redhat.com/errata/RHSA-2024:2616
- https://access.redhat.com/errata/RHSA-2024:3258
- https://access.redhat.com/errata/RHSA-2024:3261
- https://access.redhat.com/errata/RHSA-2024:3343
- https://access.redhat.com/errata/RHSA-2024:9093
- https://access.redhat.com/errata/RHSA-2024:9122
- https://access.redhat.com/errata/RHSA-2025:12751
- https://access.redhat.com/security/cve/CVE-2024-31083
- https://bugzilla.redhat.com/show_bug.cgi?id=2272000
- http://www.openwall.com/lists/oss-security/2024/04/03/13
- http://www.openwall.com/lists/oss-security/2024/04/12/10
- https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html
- https://lists.fedoraproject.org/archives/list/[email protected]/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/
- https://nvd.nist.gov/vuln/detail/CVE-2024-31083