Lucene search

K
freebsdFreeBSD57561CFC-F24B-11EE-9730-001FC69CD6DC
HistoryApr 03, 2024 - 12:00 a.m.

xorg server -- Multiple vulnerabilities

2024-04-0300:00:00
vuxml.freebsd.org
17
x.org
server
vulnerabilities
data leakage
buffer overread
user-after-free

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

The X.Org project reports:

      CVE-2024-31080: Heap buffer overread/data leakage in
      ProcXIGetSelectedEvents

      The ProcXIGetSelectedEvents() function uses the byte-swapped
      length of the return data for the amount of data to return to
      the client, if the client has a different endianness than
      the X server.

CVE-2024-31081: Heap buffer overread/data leakage in
ProcXIPassiveGrabDevice

    The ProcXIPassiveGrabDevice() function uses the byte-swapped
    length of the return data for the amount of data to return to
    the client, if the client has a different endianness than
    the X server.

CVE-2024-31083: User-after-free in ProcRenderAddGlyphs

    The ProcRenderAddGlyphs() function calls the AllocateGlyph()
    function to store new glyphs sent by the client to the X server.
    AllocateGlyph() would return a new glyph with refcount=0 and
    a re-used glyph would end up not changing the refcount at all.
    The resulting glyph_new array would thus have multiple entries
    pointing to the same non-refcounted glyphs.

    ProcRenderAddGlyphs() may free a glyph, resulting in a
    use-after-free when the same glyph pointer is then later used.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%