Количество 33
Количество 33
BDU:2024-03130
Уязвимость функции ProcRenderAddGlyphs() сервера X Window System Xorg-server, позволяющая нарушителю выполнить произвольный код
ALT-PU-2024-5112
ALT-PU-2024-5112: package `xorg-xwayland` update to version 23.1.1-alt5
ROS-20240507-07
Множественные уязвимости xorg-x11-server-common
ALT-PU-2024-5110
ALT-PU-2024-5110: package `xorg-server` update to version 1.20.14-alt12
CVE-2024-31083
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.
CVE-2024-31083
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.
CVE-2024-31083
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.
CVE-2024-31083
CVE-2024-31083
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() ...
SUSE-SU-2024:1263-1
Security update for xorg-x11-server
GHSA-q6w6-rjjj-5p52
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.
SUSE-SU-2024:2776-1
Security update for dri3proto, presentproto, wayland-protocols, xwayland
SUSE-SU-2024:1264-1
Security update for xwayland
RLSA-2024:9122
Moderate: xorg-x11-server security update
RLSA-2024:9093
Moderate: xorg-x11-server-Xwayland security update
RLSA-2024:3343
Important: xorg-x11-server-Xwayland security update
RLSA-2024:3261
Important: tigervnc security update
RLSA-2024:3258
Moderate: xorg-x11-server security update
RLSA-2024:2616
Important: tigervnc security update
RLSA-2024:2037
Important: tigervnc security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-03130 Уязвимость функции ProcRenderAddGlyphs() сервера X Window System Xorg-server, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.8 | 2% Низкий | больше 2 лет назад |
 | ALT-PU-2024-5112 ALT-PU-2024-5112: package `xorg-xwayland` update to version 23.1.1-alt5 | CVSS3: 7.8 | больше 2 лет назад | |
 | ROS-20240507-07 Множественные уязвимости xorg-x11-server-common | CVSS3: 7.8 | больше 2 лет назад | |
| ALT-PU-2024-5110 ALT-PU-2024-5110: package `xorg-server` update to version 1.20.14-alt12 | CVSS3: 7.8 | больше 2 лет назад | |
 | CVE-2024-31083 A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request. | CVSS3: 7.8 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-31083 A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request. | CVSS3: 7.8 | 2% Низкий | больше 2 лет назад |
| CVE-2024-31083 A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request. | CVSS3: 7.8 | 2% Низкий | больше 2 лет назад |
 | CVSS3: 7.8 | 2% Низкий | около 2 лет назад | |
| CVE-2024-31083 A use-after-free vulnerability was found in the ProcRenderAddGlyphs() ... | CVSS3: 7.8 | 2% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:1263-1 Security update for xorg-x11-server | 2% Низкий | больше 2 лет назад | |
| GHSA-q6w6-rjjj-5p52 A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request. | CVSS3: 7.8 | 2% Низкий | больше 2 лет назад |
| SUSE-SU-2024:2776-1 Security update for dri3proto, presentproto, wayland-protocols, xwayland | около 2 лет назад | ||
| SUSE-SU-2024:1264-1 Security update for xwayland | больше 2 лет назад | ||
 | RLSA-2024:9122 Moderate: xorg-x11-server security update | больше 1 года назад | ||
| RLSA-2024:9093 Moderate: xorg-x11-server-Xwayland security update | больше 1 года назад | ||
| RLSA-2024:3343 Important: xorg-x11-server-Xwayland security update | больше 2 лет назад | ||
| RLSA-2024:3261 Important: tigervnc security update | больше 2 лет назад | ||
| RLSA-2024:3258 Moderate: xorg-x11-server security update | больше 2 лет назад | ||
| RLSA-2024:2616 Important: tigervnc security update | больше 2 лет назад | ||
| RLSA-2024:2037 Important: tigervnc security update | больше 2 лет назад |
Уязвимостей на страницу