Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-server | Aug 30, 2017 | Jan 18, 2014 |
| Centos_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-Xephyr | Dec 1, 2016 | Jan 18, 2014 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Jan 18, 2014 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Jan 18, 2014 |
| Oracle_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx | Oct 16, 2024 | Jan 18, 2014 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade xorg-x11-XvncUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdk | Jan 9, 2014 | Jan 9, 2014 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-lts-trusty | Nov 8, 2024 | Jan 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub