X.Org X Server vulnerabilities

2024-04-0400:00:00

ubuntu.com

ubuntu

x.org x server

vulnerabilities

data handling

xwayland

cve-2024-31080

cve-2024-31081

cve-2024-31082

glyphs

crash

sensitive information

7.8 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.7%

JSON

Releases

Ubuntu 23.10
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

xorg-server - X.Org X11 server
xwayland - X server for running X clients under Wayland

Details

It was discovered that X.Org X Server incorrectly handled certain data.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2024-31080, CVE-2024-31081, CVE-2024-31082)

It was discovered that X.Org X Server incorrectly handled certain glyphs.
An attacker could possibly use this issue to cause a crash or expose sensitive
information. (CVE-2024-31083)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchxserver-xorg-core< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxnest< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxnest-dbgsym< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxorg-server-source< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxserver-common< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxserver-xephyr< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxserver-xephyr-dbgsym< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxserver-xorg-core-dbgsym< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxserver-xorg-dev< 2:21.1.7-3ubuntu2.8UNKNOWN
Ubuntu23.10noarchxserver-xorg-legacy< 2:21.1.7-3ubuntu2.8UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.10	noarch	xserver-xorg-core	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xnest	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xnest-dbgsym	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xorg-server-source	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xserver-common	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xserver-xephyr	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xserver-xephyr-dbgsym	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xserver-xorg-core-dbgsym	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xserver-xorg-dev	< 2:21.1.7-3ubuntu2.8	UNKNOWN
Ubuntu	23.10	noarch	xserver-xorg-legacy	< 2:21.1.7-3ubuntu2.8	UNKNOWN