Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-server | Aug 30, 2017 | Jan 18, 2014 |
| Centos_linux | — | Upgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xorg | Dec 1, 2016 | Jan 18, 2014 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Jan 18, 2014 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Jan 18, 2014 |
| Oracle_linux | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-source | Oct 16, 2024 | Jan 18, 2014 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-XvncUpgrade sle-sdk-release | Jan 9, 2014 | Jan 9, 2014 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-lts-trusty | Nov 8, 2024 | Jan 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub