CVE-2024-31083
- Source
- https://cve.org/CVERecord?id=CVE-2024-31083
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-31083.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-31083
- Downstream
ALPINE (1)
ALSA (7)
BELL (1)
CLEANSTART (1)
CLSA (1)
MGASA (1)
openSUSE (2)
RHSA (16)
SUSE (8)
UBUNTU (1)
- Related
- Published
- 2024-04-05T12:04:49Z
- Modified
- 2026-10-22T10:33:35Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Xorg-x11-server: use-after-free in procrenderaddglyphs
- Details
-
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.
- Database specific
{ "cna_assigner": "redhat", "cwe_ids": [ "CWE-416" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31083.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "fixed": "0:1.1.0-25.el6_10.13" }, { "fixed": "0:1.20.4-29.el7_9" }, { "fixed": "0:1.8.0-33.el7_9" }, { "fixed": "0:1.13.1-2.el8_9.10" }, { "fixed": "0:1.20.11-23.el8_10" }, { "fixed": "0:1.13.1-10.el8_10" }, { "fixed": "0:21.1.3-16.el8_10" }, { "fixed": "0:1.9.0-15.el8_2.11" }, { "fixed": "0:1.9.0-15.el8_2.11" }, { "fixed": "0:1.9.0-15.el8_2.11" }, { "fixed": "0:1.11.0-8.el8_4.10" }, { "fixed": "0:1.11.0-8.el8_4.10" }, { "fixed": "0:1.11.0-8.el8_4.10" }, { "fixed": "0:1.12.0-6.el8_6.11" }, { "fixed": "0:1.12.0-15.el8_8.10" }, { "fixed": "0:1.13.1-8.el9_4.3" }, { "fixed": "0:23.2.7-1.el9" }, { "fixed": "0:1.20.11-26.el9" }, { "fixed": "0:1.11.0-22.el9_0.11" }, { "fixed": "0:1.12.0-14.el9_2.8" } ], "source": "AFFECTED_FIELD", "strategy": "InverseAffectedRanges" } ] } ] }- References
-
- http://www.openwall.com/lists/oss-security/2024/04/03/13
- http://www.openwall.com/lists/oss-security/2024/04/12/10
- https://access.redhat.com/downloads/content/package-browser/
- https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/
- https://access.redhat.com/errata/RHSA-2024:1785
- https://access.redhat.com/errata/RHSA-2024:2036
- https://access.redhat.com/errata/RHSA-2024:2037
- https://access.redhat.com/errata/RHSA-2024:2038
- https://access.redhat.com/errata/RHSA-2024:2039
- https://access.redhat.com/errata/RHSA-2024:2040
- https://access.redhat.com/errata/RHSA-2024:2041
- https://access.redhat.com/errata/RHSA-2024:2042
- https://access.redhat.com/errata/RHSA-2024:2080
- https://access.redhat.com/errata/RHSA-2024:2616
- https://access.redhat.com/errata/RHSA-2024:3258
- https://access.redhat.com/errata/RHSA-2024:3261
- https://access.redhat.com/errata/RHSA-2024:3343
- https://access.redhat.com/errata/RHSA-2024:9093
- https://access.redhat.com/errata/RHSA-2024:9122
- https://access.redhat.com/errata/RHSA-2025:12751
- https://access.redhat.com/security/cve/CVE-2024-31083
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31083.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-31083
- https://bugzilla.redhat.com/show_bug.cgi?id=2272000
- https://gitlab.freedesktop.org/xorg/xserver