Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-server | Aug 30, 2017 | Oct 10, 2013 |
| Centos_linux | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr | Dec 1, 2016 | Oct 10, 2013 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Oct 10, 2013 |
| Freebsd | — | Upgrade xorg-server | Dec 10, 2025 | Oct 24, 2013 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Oct 10, 2013 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory2 | Nov 30, 2017 | Oct 10, 2013 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.1.0-0.175.1.17.0.3.1348 on Solaris 11.1Upgrade x11/server/xorg to version 1.12.2-0.175.1.17.0.3.1348 on Solaris 11.1Upgrade x11/server/xvfb to version 1.12.2-0.175.1.17.0.3.1348 on Solaris 11.1Upgrade x11/server/xephyr to version 1.12.2-0.175.1.17.0.3.1348 on Solaris 11.1 | May 29, 2017 | Oct 10, 2013 |
| Oracle_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx | Oct 16, 2024 | Oct 10, 2013 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade sle-sdk-releaseUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-Xvnc | Dec 12, 2013 | Oct 10, 2013 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-lts-quantalUpgrade xserver-xorg-core-lts-raring | Nov 8, 2024 | Oct 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub