Fluid Attacks Database

Description

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	xorg-server	=2:1.20.11-1 \|\| =2:1.20.11-1+deb11u1 \|\| =2:1.20.11-1+deb11u10 \|\| =2:1.20.11-1+deb11u11 \|\| =2:1.20.11-1+deb11u12 \|\| =2:1.20.11-1+deb11u2 \|\| =2:1.20.11-1+deb11u3 \|\| =2:1.20.11-1+deb11u4 \|\| =2:1.20.11-1+deb11u5 \|\| =2:1.20.11-1+deb11u6 \|\| =2:1.20.11-1+deb11u7 \|\| =2:1.20.11-1+deb11u8 \|\| =2:1.20.11-1+deb11u9 \|\| >=0 <2:1.20.11-1+deb11u13	2:1.20.11-1+deb11u13
debian 12	xorg-server	=2:21.1.7-3 \|\| =2:21.1.7-3+deb12u1 \|\| =2:21.1.7-3+deb12u2 \|\| =2:21.1.7-3+deb12u3 \|\| =2:21.1.7-3+deb12u4 \|\| =2:21.1.7-3+deb12u5 \|\| =2:21.1.7-3+deb12u6 \|\| >=0 <2:21.1.7-3+deb12u7	2:21.1.7-3+deb12u7
debian 13	xorg-server	>=0 <2:21.1.11-3	2:21.1.11-3
debian 14	xorg-server	>=0 <2:21.1.11-3	2:21.1.11-3
debian 12	xwayland	=2:22.1.9-1 \|\| =2:23.1.0-1 \|\| =2:23.1.1-1 \|\| =2:23.2.0-1 \|\| =2:23.2.1-1 \|\| =2:23.2.2-1 \|\| =2:23.2.3-1 \|\| =2:23.2.4-1 \|\| =2:23.2.6-1 \|\| =2:24.0.99.901-1 \|\| =2:24.1.0-1 \|\| =2:24.1.10-1 \|\| =2:24.1.11-1 \|\| =2:24.1.2-1 \|\| =2:24.1.3-1 \|\| =2:24.1.4-1 \|\| =2:24.1.4-2 \|\| =2:24.1.4-3 \|\| =2:24.1.5-1 \|\| =2:24.1.6-1 \|\| =2:24.1.8-1 \|\| =2:24.1.9-1	-
debian 13	xwayland	>=0 <2:23.2.6-1	2:23.2.6-1
debian 14	xwayland	>=0 <2:23.2.6-1	2:23.2.6-1
rpm rhel6	xorg-x11-server	-	-
rpm rhel8.8	tigervnc	<0:1.12.0-15.el8_8.10	0:1.12.0-15.el8_8.10
rpm rhel7	xorg-x11-server	<0:1.20.4-29.el7_9	0:1.20.4-29.el7_9

1-10 of 20

Aliases

1. CVE-2024-310832. NVD-2024-310833. OSV-DEBIAN-2024-310834. OSV-2024-310835. SECURITY-TRACKER-CVE-2024-31083

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.