CVE-2024-31081

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-31081
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-31081.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-31081
Downstream
AZL (2)
BELL (1)
CGA (2)
CLSA (2)
DEBIAN (1)
MGASA (1)
OESA (4)
openSUSE (2)
RHSA (16)
RLSA (6)
SUSE (7)
UBUNTU (1)
Related
ALSA (7)
openSUSE (2)
RLSA (1)
SUSE (7)
Published
2024-04-04T13:48:12Z
Modified
2026-10-16T02:54:22Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H CVSS Calculator
Summary
Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice
Details

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Database specific 
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-126"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31081.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "0:1.1.0-25.el6_10.13"
                        },
                        {
                            "fixed": "0:1.20.4-29.el7_9"
                        },
                        {
                            "fixed": "0:1.8.0-33.el7_9"
                        },
                        {
                            "fixed": "0:1.13.1-2.el8_9.10"
                        },
                        {
                            "fixed": "0:1.20.11-23.el8_10"
                        },
                        {
                            "fixed": "0:1.13.1-10.el8_10"
                        },
                        {
                            "fixed": "0:21.1.3-16.el8_10"
                        },
                        {
                            "fixed": "0:1.9.0-15.el8_2.11"
                        },
                        {
                            "fixed": "0:1.9.0-15.el8_2.11"
                        },
                        {
                            "fixed": "0:1.9.0-15.el8_2.11"
                        },
                        {
                            "fixed": "0:1.11.0-8.el8_4.10"
                        },
                        {
                            "fixed": "0:1.11.0-8.el8_4.10"
                        },
                        {
                            "fixed": "0:1.11.0-8.el8_4.10"
                        },
                        {
                            "fixed": "0:1.12.0-6.el8_6.11"
                        },
                        {
                            "fixed": "0:1.12.0-15.el8_8.10"
                        },
                        {
                            "fixed": "0:1.13.1-8.el9_4.3"
                        },
                        {
                            "fixed": "0:23.2.7-1.el9"
                        },
                        {
                            "fixed": "0:1.20.11-26.el9"
                        },
                        {
                            "fixed": "0:1.11.0-22.el9_0.11"
                        },
                        {
                            "fixed": "0:1.12.0-14.el9_2.8"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / gitlab.freedesktop.org/xorg/xserver

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/xorg/xserver
Events
Introduced
4257023c1e40387aff096d5f00d746d3f7a521b4
Last Affected
4257023c1e40387aff096d5f00d746d3f7a521b4
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "1.7.0"
                },
                {
                    "last_affected": "1.7.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        }
    ]
}

Affected versions

1.*
1.7.0
xorg-server-1.*
xorg-server-1.7.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-31081.json"