Lucene search

K
osvGoogleOSV:USN-6721-2
HistoryApr 09, 2024 - 9:16 p.m.

xorg-server, xwayland regression

2024-04-0921:16:47
Google
osv.dev
6
xorg-server
xwayland
regression
fixed
vulnerabilities
incomplete
update
incorrect handling
sensitive information
glyphs
crash

7.4 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.7%

USN-6721-1 fixed vulnerabilities in X.Org X Server. That fix was incomplete
resulting in a regression. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that X.Org X Server incorrectly handled certain data.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2024-31080, CVE-2024-31081, CVE-2024-31082)

It was discovered that X.Org X Server incorrectly handled certain glyphs.
An attacker could possibly use this issue to cause a crash or expose sensitive
information. (CVE-2024-31083)