Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mesa-libGLUpgrade mesa-libGLw-develUpgrade mesa-libGLUUpgrade mesa-libGLU-develUpgrade glx-utilsUpgrade mesa-dri-filesystemUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-develUpgrade mesa-libOSMesaUpgrade mesa-dri-driversUpgrade mesa-libGLwUpgrade mesa-demosUpgrade mesa-source | Dec 1, 2016 | Jun 15, 2013 |
| Debian | — | Upgrade mesa | Jul 30, 2024 | Jun 15, 2013 |
| Freebsd | — | Upgrade libFSUpgrade libXxf86vmUpgrade libdmxUpgrade libxcbUpgrade libGLUpgrade libXpUpgrade libXiUpgrade libXresUpgrade libXrenderUpgrade libXtUpgrade libXxf86dgaUpgrade libXtstUpgrade libXextUpgrade libX11Upgrade libXfixesUpgrade libXcursorUpgrade xf86-video-openchromeUpgrade libXvMCUpgrade libXvUpgrade libXrandrUpgrade libXinerama | Dec 10, 2025 | Jun 4, 2013 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Jun 15, 2013 |
| Oracle Solaris | — | Upgrade x11/library/libxp to version 1.0.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxext to version 1.3.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxi to version 1.6.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxrandr to version 1.3.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxrender to version 0.9.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/mesa to version 7.11.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxinerama to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxcb to version 1.8.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxxf86vm to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxcursor to version 1.1.13-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libdmx to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/toolkit/libxt to version 1.1.3-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxv to version 1.0.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libfs to version 1.0.4-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxfixes to version 5.0-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxtst to version 1.2.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libx11 to version 1.5.0-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxvmc to version 1.0.7-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxres to version 1.0.6-0.175.1.8.0.3.1332 on Solaris 11.1 | May 29, 2017 | Jun 15, 2013 |
| Oracle_linux | — | Upgrade mesa-libGLU-develUpgrade mesa-sourceUpgrade mesa-libGLw-develUpgrade mesa-libGLUUpgrade mesa-libOSMesa-develUpgrade glx-utilsUpgrade mesa-libGLwUpgrade mesa-libGLUpgrade mesa-libGL-develUpgrade mesa-libOSMesa | Oct 16, 2024 | Jun 15, 2013 |
| Suse | — | Upgrade libvdpau_softpipe-32bitUpgrade Mesa-libIndirectGL-devel-32bitUpgrade libXvMC_r300-32bitUpgrade libxatracker1Upgrade libOSMesa9Upgrade Mesa-libglapi0-32bitUpgrade Mesa-32bitUpgrade Mesa-libGLESv1_CM-devel-32bitUpgrade Mesa-libglapi-devel-32bitUpgrade libvdpau_r300-32bitUpgrade Mesa-libGLESv2-2-32bitUpgrade Mesa-libGLESv1_CM1Upgrade Mesa-develUpgrade libvdpau_nouveauUpgrade Mesa-libGLU1-32bitUpgrade libOSMesa8Upgrade libXvMC_r600-32bitUpgrade Mesa-libGL1Upgrade Mesa-libGL-devel-32bitUpgrade Mesa-libEGL1Upgrade Mesa-libIndirectGL-develUpgrade libOSMesa8-32bitUpgrade Mesa-libGLU1Upgrade Mesa-libEGL-devel-32bitUpgrade Mesa-libGL1-32bitUpgrade Mesa-libglapi-develUpgrade Mesa-libGL-develUpgrade MesaUpgrade libOSMesa9-32bitUpgrade libXvMC_nouveau-32bitUpgrade libvdpau_r600Upgrade libXvMC_r600Upgrade libvdpau_r300Upgrade Mesa-libIndirectGL1-32bitUpgrade Mesa-devel-32bitUpgrade libXvMC_r300Upgrade Mesa-libGLU-develUpgrade Mesa-libEGL1-32bitUpgrade Mesa-libGLESv2-devel-32bitUpgrade libvdpau_softpipeUpgrade Mesa-libEGL-develUpgrade libXvMC_nouveauUpgrade Mesa-libGLU-devel-32bitUpgrade Mesa-devel-64bitUpgrade Mesa-libGLESv2-develUpgrade Mesa-libIndirectGL1Upgrade Mesa-libGLESv2-2Upgrade Mesa-64bitUpgrade libgbm1-32bitUpgrade libgbm-devel-32bitUpgrade libgbm-develUpgrade libxatracker-develUpgrade libvdpau_nouveau-32bitUpgrade libXvMC_softpipeUpgrade sle-sdk-releaseUpgrade libOSMesa-develUpgrade Mesa-libGLESv1_CM-develUpgrade libOSMesa-devel-32bitUpgrade Mesa-libglapi0Upgrade libvdpau_r600-32bitUpgrade libgbm1Upgrade Mesa-libGLESv1_CM1-32bitUpgrade libXvMC_softpipe-32bitUpgrade Mesa-x86 | Dec 12, 2013 | Jun 15, 2013 |
| Ubuntu | — | Upgrade libgles2-mesa-lts-quantalUpgrade libgles1-mesaUpgrade libosmesa6Upgrade libglapi-mesaUpgrade libglapi-mesa-lts-quantalUpgrade libegl1-mesa-lts-quantalUpgrade libgl1-mesa-glxUpgrade libgles1-mesa-lts-quantalUpgrade libgbm1Upgrade libopenvg1-mesaUpgrade libopenvg1-mesa-lts-quantalUpgrade libegl1-mesaUpgrade libgbm1-lts-quantalUpgrade libglu1-mesaUpgrade libgles2-mesaUpgrade libgl1-mesa-dri-lts-quantalUpgrade libgl1-mesa-driUpgrade libxatracker1-lts-quantalUpgrade libxatracker1Upgrade libgl1-mesa-glx-lts-quantalUpgrade libgl1-mesa-swx11 | Nov 8, 2024 | Jun 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub