CVE-2024-31083

EUVD-2024-28994

05.04.2024, 12:15

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 76%

Debian Releases

Debian Product

Codename

xorg-server

bookworm	2:21.1.7-3+deb12u10 ignored
bookworm (security)	2:21.1.7-3+deb12u11 fixed
bullseye	2:1.20.11-1+deb11u13 fixed
bullseye (security)	2:1.20.11-1+deb11u17 fixed
forky	2:21.1.21-1 fixed
sid	2:21.1.21-1 fixed
trixie	2:21.1.16-1.3+deb13u1 fixed
trixie (security)	2:21.1.16-1.3+deb13u1 fixed

xwayland

bookworm	ignored
forky	2:24.1.9-1 fixed
sid	2:24.1.9-1 fixed
trixie	2:24.1.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

xorg

bionic	not-affected
focal	not-affected
jammy	not-affected
mantic	not-affected
noble	not-affected
oracular	not-affected
plucky	not-affected
questing	not-affected
xenial	not-affected

xorg-server

bionic	Fixed 2:1.19.6-1ubuntu4.15+esm8 released
focal	Fixed 2:1.20.13-1ubuntu1~20.04.17 released
jammy	Fixed 2:21.1.4-2ubuntu1.7~22.04.10 released
mantic	Fixed 2:21.1.7-3ubuntu2.9 released
noble	Fixed 2:21.1.12-1ubuntu1 released
oracular	Fixed 2:21.1.12-1ubuntu1 released
plucky	Fixed 2:21.1.12-1ubuntu1 released
questing	Fixed 2:21.1.12-1ubuntu1 released
trusty	Fixed 2:1.15.1-0ubuntu2.11+esm11 released
xenial	Fixed 2:1.18.4-0ubuntu0.12+esm13 released

xwayland

focal	dne
jammy	Fixed 2:22.1.1-1ubuntu0.13 released
mantic	Fixed 2:23.2.0-1ubuntu0.6 released
noble	not-affected
oracular	not-affected
plucky	not-affected
questing	not-affected

xorg-server-hwe-16.04

focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
xenial	needs-triage

xorg-server-hwe-18.04

bionic	needs-triage
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

xorg-hwe-16.04

focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
xenial	not-affected

xorg-hwe-18.04

bionic	not-affected
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

openSUSE / SLES Releases

openSUSE Product

Release

dri3proto-devel

suse enterprise desktop 15 SP5	1.2-150100.6.3.1 fixed
suse enterprise desktop 15 SP6	1.2-150100.6.3.1 fixed
suse enterprise desktop 15 SP7	1.2-150100.6.3.1 fixed
suse enterprise sap 15 SP5	1.2-150100.6.3.1 fixed
suse enterprise sap 15 SP6	1.2-150100.6.3.1 fixed
suse enterprise sap 15 SP7	1.2-150100.6.3.1 fixed
suse enterprise server 15 SP4	1.2-150100.6.3.1 fixed
suse enterprise server 15 SP5	1.2-150100.6.3.1 fixed
suse enterprise server 15 SP6	1.2-150100.6.3.1 fixed
suse enterprise server 15 SP7	1.2-150100.6.3.1 fixed

presentproto-devel

suse enterprise desktop 15 SP6	1.3-150600.3.3.1 fixed
suse enterprise desktop 15 SP7	1.3-150600.3.3.1 fixed
suse enterprise sap 15 SP6	1.3-150600.3.3.1 fixed
suse enterprise sap 15 SP7	1.3-150600.3.3.1 fixed
suse enterprise server 15 SP6	1.3-150600.3.3.1 fixed
suse enterprise server 15 SP7	1.3-150600.3.3.1 fixed

xorg-x11-server

suse enterprise desktop 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise desktop 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise desktop 15 SP7	21.1.15-150700.3.2 fixed
suse enterprise sap 12 SP5	1.19.6-10.74.1 fixed
suse enterprise sap 15 SP2	1.20.3-150200.22.5.96.1 fixed
suse enterprise sap 15 SP3	1.20.3-150200.22.5.96.1 fixed
suse enterprise sap 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise sap 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise sap 15 SP7	21.1.15-150700.3.2 fixed
suse enterprise server 12 SP5	1.19.6-10.74.1 fixed
suse enterprise server 15 SP2	1.20.3-150200.22.5.96.1 fixed
suse enterprise server 15 SP3	1.20.3-150200.22.5.96.1 fixed
suse enterprise server 15 SP4	1.20.3-150400.38.48.1 fixed
suse enterprise server 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise server 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise server 15 SP7	21.1.15-150700.3.2 fixed

xorg-x11-server-Xvfb

suse enterprise desktop 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise desktop 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise desktop 15 SP7	21.1.15-150700.3.2 fixed
suse enterprise sap 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise sap 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise sap 15 SP7	21.1.15-150700.3.2 fixed
suse enterprise server 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise server 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise server 15 SP7	21.1.15-150700.3.2 fixed

xorg-x11-server-extra

suse enterprise desktop 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise desktop 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise desktop 15 SP7	21.1.15-150700.3.2 fixed
suse enterprise sap 12 SP5	1.19.6-10.74.1 fixed
suse enterprise sap 15 SP2	1.20.3-150200.22.5.96.1 fixed
suse enterprise sap 15 SP3	1.20.3-150200.22.5.96.1 fixed
suse enterprise sap 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise sap 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise sap 15 SP7	21.1.15-150700.3.2 fixed
suse enterprise server 12 SP5	1.19.6-10.74.1 fixed
suse enterprise server 15 SP2	1.20.3-150200.22.5.96.1 fixed
suse enterprise server 15 SP3	1.20.3-150200.22.5.96.1 fixed
suse enterprise server 15 SP4	1.20.3-150400.38.48.1 fixed
suse enterprise server 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise server 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise server 15 SP7	21.1.15-150700.3.2 fixed

xorg-x11-server-sdk

suse enterprise desktop 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise desktop 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise desktop 15 SP7	21.1.15-150700.3.2 fixed
suse enterprise sap 15 SP2	1.20.3-150200.22.5.96.1 fixed
suse enterprise sap 15 SP3	1.20.3-150200.22.5.96.1 fixed
suse enterprise sap 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise sap 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise sap 15 SP7	21.1.15-150700.3.2 fixed
suse enterprise server 15 SP2	1.20.3-150200.22.5.96.1 fixed
suse enterprise server 15 SP3	1.20.3-150200.22.5.96.1 fixed
suse enterprise server 15 SP4	1.20.3-150400.38.48.1 fixed
suse enterprise server 15 SP5	21.1.4-150500.7.26.1 fixed
suse enterprise server 15 SP6	21.1.11-150600.3.2 fixed
suse enterprise server 15 SP7	21.1.15-150700.3.2 fixed

xorg-x11-server-wayland

suse enterprise desktop 15 SP5	1.20.3-150200.22.5.96.1 fixed
suse enterprise desktop 15 SP6	1.20.3-150200.22.5.96.1 fixed
suse enterprise sap 15 SP5	1.20.3-150200.22.5.96.1 fixed
suse enterprise sap 15 SP6	1.20.3-150200.22.5.96.1 fixed
suse enterprise server 15 SP5	1.20.3-150200.22.5.96.1 fixed
suse enterprise server 15 SP6	1.20.3-150200.22.5.96.1 fixed
suse enterprise workstation 15 SP5	1.20.3-150200.22.5.96.1 fixed
suse enterprise workstation 15 SP6	1.20.3-150200.22.5.96.1 fixed

xwayland

suse enterprise desktop 15 SP5	22.1.5-150500.7.22.1 fixed
suse enterprise desktop 15 SP6	24.1.1-150600.5.3.1 fixed
suse enterprise sap 15 SP5	22.1.5-150500.7.22.1 fixed
suse enterprise sap 15 SP6	24.1.1-150600.5.3.1 fixed
suse enterprise server 15 SP5	22.1.5-150500.7.22.1 fixed
suse enterprise server 15 SP6	24.1.1-150600.5.3.1 fixed
suse enterprise workstation 15 SP5	22.1.5-150500.7.22.1 fixed
suse enterprise workstation 15 SP6	24.1.1-150600.5.3.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

tigervnc

RHEL 7	0:1.8.0-33.el7_9 fixed
RHEL 8	0:1.13.1-10.el8_10 fixed
RHEL 8.2 AUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 E4S	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 TUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.4 AUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 E4S	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 TUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.6 AUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 E4S	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 EUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 TUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.8 AUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 E4S	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 EUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 TUS	0:1.12.0-15.el8_8.10 fixed
RHEL 9	0:1.13.1-8.el9_4.3 fixed

tigervnc-icons

RHEL 7	0:1.8.0-33.el7_9 fixed
RHEL 8	0:1.13.1-10.el8_10 fixed
RHEL 8.2 AUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 E4S	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 TUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.4 AUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 E4S	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 TUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.6 AUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 E4S	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 EUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 TUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.8 AUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 E4S	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 EUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 TUS	0:1.12.0-15.el8_8.10 fixed
RHEL 9	0:1.13.1-8.el9_4.3 fixed

tigervnc-license

RHEL 7	0:1.8.0-33.el7_9 fixed
RHEL 8	0:1.13.1-10.el8_10 fixed
RHEL 8.2 AUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 E4S	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 TUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.4 AUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 E4S	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 TUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.6 AUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 E4S	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 EUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 TUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.8 AUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 E4S	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 EUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 TUS	0:1.12.0-15.el8_8.10 fixed
RHEL 9	0:1.13.1-8.el9_4.3 fixed

tigervnc-selinux

RHEL 8	0:1.13.1-10.el8_10 fixed
RHEL 8.4 AUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 E4S	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 TUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.6 AUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 E4S	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 EUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 TUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.8 AUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 E4S	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 EUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 TUS	0:1.12.0-15.el8_8.10 fixed
RHEL 9	0:1.13.1-8.el9_4.3 fixed

tigervnc-server

RHEL 7	0:1.8.0-33.el7_9 fixed
RHEL 8	0:1.13.1-10.el8_10 fixed
RHEL 8.2 AUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 E4S	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 TUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.4 AUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 E4S	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 TUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.6 AUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 E4S	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 EUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 TUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.8 AUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 E4S	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 EUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 TUS	0:1.12.0-15.el8_8.10 fixed
RHEL 9	0:1.13.1-8.el9_4.3 fixed

tigervnc-server-applet

RHEL 7	0:1.8.0-33.el7_9 fixed
RHEL 8.2 AUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 E4S	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 TUS	0:1.9.0-15.el8_2.11 fixed

tigervnc-server-minimal

RHEL 7	0:1.8.0-33.el7_9 fixed
RHEL 8	0:1.13.1-10.el8_10 fixed
RHEL 8.2 AUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 E4S	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 TUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.4 AUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 E4S	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 TUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.6 AUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 E4S	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 EUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 TUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.8 AUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 E4S	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 EUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 TUS	0:1.12.0-15.el8_8.10 fixed
RHEL 9	0:1.13.1-8.el9_4.3 fixed

tigervnc-server-module

RHEL 7	0:1.8.0-33.el7_9 fixed
RHEL 8	0:1.13.1-10.el8_10 fixed
RHEL 8.2 AUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 E4S	0:1.9.0-15.el8_2.11 fixed
RHEL 8.2 TUS	0:1.9.0-15.el8_2.11 fixed
RHEL 8.4 AUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 E4S	0:1.11.0-8.el8_4.10 fixed
RHEL 8.4 TUS	0:1.11.0-8.el8_4.10 fixed
RHEL 8.6 AUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 E4S	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 EUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.6 TUS	0:1.12.0-6.el8_6.11 fixed
RHEL 8.8 AUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 E4S	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 EUS	0:1.12.0-15.el8_8.10 fixed
RHEL 8.8 TUS	0:1.12.0-15.el8_8.10 fixed
RHEL 9	0:1.13.1-8.el9_4.3 fixed

xorg-x11-server-Xdmx

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 8	0:1.20.11-23.el8_10 fixed
RHEL 9	0:1.20.11-26.el9 fixed

xorg-x11-server-Xephyr

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 8	0:1.20.11-23.el8_10 fixed
RHEL 9	0:1.20.11-26.el9 fixed

xorg-x11-server-Xnest

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 8	0:1.20.11-23.el8_10 fixed
RHEL 9	0:1.20.11-26.el9 fixed

xorg-x11-server-Xorg

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 8	0:1.20.11-23.el8_10 fixed
RHEL 9	0:1.20.11-26.el9 fixed

xorg-x11-server-Xvfb

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 8	0:1.20.11-23.el8_10 fixed
RHEL 9	0:1.20.11-26.el9 fixed

xorg-x11-server-Xwayland

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 9	0:23.2.7-1.el9 fixed

xorg-x11-server-Xwayland-devel

RHEL 9

0:23.2.7-1.el9

fixed

xorg-x11-server-common

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 8	0:1.20.11-23.el8_10 fixed
RHEL 9	0:1.20.11-26.el9 fixed

xorg-x11-server-devel

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 8	0:1.20.11-23.el8_10 fixed
RHEL 9	0:1.20.11-26.el9 fixed

xorg-x11-server-source

RHEL 7	0:1.20.4-29.el7_9 fixed
RHEL 8	0:1.20.11-23.el8_10 fixed
RHEL 9	0:1.20.11-26.el9 fixed

Amazon Linux Releases

Amazon Package

Release

tigervnc

Amazon Linux 1	0:1.8.0-21.36.amzn1 fixed
Amazon Linux 2	0:1.8.0-24.amzn2.0.3 fixed

tigervnc-debuginfo

Amazon Linux 1	0:1.8.0-21.36.amzn1 fixed
Amazon Linux 2	0:1.8.0-24.amzn2.0.3 fixed

tigervnc-icons

Amazon Linux 2

0:1.8.0-24.amzn2.0.3

fixed

tigervnc-license

Amazon Linux 2

0:1.8.0-24.amzn2.0.3

fixed

tigervnc-server

Amazon Linux 1	0:1.8.0-21.36.amzn1 fixed
Amazon Linux 2	0:1.8.0-24.amzn2.0.3 fixed

tigervnc-server-applet

Amazon Linux 2

0:1.8.0-24.amzn2.0.3

fixed

tigervnc-server-minimal

Amazon Linux 2

0:1.8.0-24.amzn2.0.3

fixed

tigervnc-server-module

Amazon Linux 1	0:1.8.0-21.36.amzn1 fixed
Amazon Linux 2	0:1.8.0-24.amzn2.0.3 fixed

xorg-x11-server-Xdmx

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

xorg-x11-server-Xdmx-debuginfo

Amazon Linux 2023

0:1.20.14-30.amzn2023.0.2

fixed

xorg-x11-server-Xephyr

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

xorg-x11-server-Xephyr-debuginfo

Amazon Linux 2023

0:1.20.14-30.amzn2023.0.2

fixed

xorg-x11-server-Xnest

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

xorg-x11-server-Xnest-debuginfo

Amazon Linux 2023

0:1.20.14-30.amzn2023.0.2

fixed

xorg-x11-server-Xorg

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

xorg-x11-server-Xorg-debuginfo

Amazon Linux 2023

0:1.20.14-30.amzn2023.0.2

fixed

xorg-x11-server-Xvfb

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

xorg-x11-server-Xvfb-debuginfo

Amazon Linux 2023

0:1.20.14-30.amzn2023.0.2

fixed

xorg-x11-server-Xwayland

Amazon Linux 2

0:1.20.4-22.amzn2.0.6

fixed

xorg-x11-server-common

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

xorg-x11-server-debuginfo

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

xorg-x11-server-debugsource

Amazon Linux 2023

0:1.20.14-30.amzn2023.0.2

fixed

xorg-x11-server-devel

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

xorg-x11-server-source

Amazon Linux 1	0:1.17.4-18.55.amzn1 fixed
Amazon Linux 2	0:1.20.4-22.amzn2.0.6 fixed
Amazon Linux 2023	0:1.20.14-30.amzn2023.0.2 fixed

Azure Linux Releases

Azure Package

Release

xorg-x11-server

CBL-Mariner 2.0

0:1.20.10-11.cm2

fixed

Common Weakness Enumeration

CWE-416 - Use After Free
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

References

https://access.redhat.com/errata/RHSA-2024:1785

https://access.redhat.com/errata/RHSA-2024:2036

https://access.redhat.com/errata/RHSA-2024:2037

https://access.redhat.com/errata/RHSA-2024:2038

https://access.redhat.com/errata/RHSA-2024:2039

https://access.redhat.com/errata/RHSA-2024:2040

https://access.redhat.com/errata/RHSA-2024:2041

https://access.redhat.com/errata/RHSA-2024:2042

https://access.redhat.com/errata/RHSA-2024:2080

https://access.redhat.com/errata/RHSA-2024:2616

https://access.redhat.com/errata/RHSA-2024:3258

https://access.redhat.com/errata/RHSA-2024:3261

https://access.redhat.com/errata/RHSA-2024:3343

https://access.redhat.com/errata/RHSA-2024:9093

https://access.redhat.com/errata/RHSA-2024:9122

https://access.redhat.com/errata/RHSA-2025:12751

https://access.redhat.com/security/cve/CVE-2024-31083

https://bugzilla.redhat.com/show_bug.cgi?id=2272000

http://www.openwall.com/lists/oss-security/2024/04/03/13

http://www.openwall.com/lists/oss-security/2024/04/12/10

https://access.redhat.com/errata/RHSA-2024:1785

https://access.redhat.com/errata/RHSA-2024:2036

https://access.redhat.com/errata/RHSA-2024:2037

https://access.redhat.com/errata/RHSA-2024:2038

https://access.redhat.com/errata/RHSA-2024:2039

https://access.redhat.com/errata/RHSA-2024:2040

https://access.redhat.com/errata/RHSA-2024:2041

https://access.redhat.com/errata/RHSA-2024:2042

https://access.redhat.com/errata/RHSA-2024:2080

https://access.redhat.com/errata/RHSA-2024:2616

https://access.redhat.com/errata/RHSA-2024:3258

https://access.redhat.com/errata/RHSA-2024:3261

https://access.redhat.com/errata/RHSA-2024:3343

https://access.redhat.com/security/cve/CVE-2024-31083

https://bugzilla.redhat.com/show_bug.cgi?id=2272000

https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/