The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) __glXDisp_Render, (2) __glXDisp_RenderLarge, (3) __glXDispSwap_VendorPrivate, (4) __glXDispSwap_VendorPrivateWithReply, (5) set_client_info, (6) __glXDispSwap_SetClientInfoARB, (7) DoSwapInterval, (8) DoGetProgramString, (9) DoGetString, (10) __glXDispSwap_RenderMode, (11) __glXDisp_GetCompressedTexImage, (12) __glXDispSwap_GetCompressedTexImage, (13) __glXDisp_FeedbackBuffer, (14) __glXDispSwap_FeedbackBuffer, (15) __glXDisp_SelectBuffer, (16) __glXDispSwap_SelectBuffer, (17) __glXDisp_Flush, (18) __glXDispSwap_Flush, (19) __glXDisp_Finish, (20) __glXDispSwap_Finish, (21) __glXDisp_ReadPixels, (22) __glXDispSwap_ReadPixels, (23) __glXDisp_GetTexImage, (24) __glXDispSwap_GetTexImage, (25) __glXDisp_GetPolygonStipple, (26) __glXDispSwap_GetPolygonStipple, (27) __glXDisp_GetSeparableFilter, (28) __glXDisp_GetSeparableFilterEXT, (29) __glXDisp_GetConvolutionFilter, (30) __glXDisp_GetConvolutionFilterEXT, (31) __glXDisp_GetHistogram, (32) __glXDisp_GetHistogramEXT, (33) __glXDisp_GetMinmax, (34) __glXDisp_GetMinmaxEXT, (35) __glXDisp_GetColorTable, (36) __glXDisp_GetColorTableSGI, (37) GetSeparableFilter, (38) GetConvolutionFilter, (39) GetHistogram, (40) GetMinmax, or (41) GetColorTable function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-Xdmx | Dec 1, 2016 | Dec 10, 2014 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Dec 10, 2014 |
| Freebsd | — | Upgrade nvidia-driver-304Upgrade nvidia-driver-71Upgrade xorg-serverUpgrade nvidia-driverUpgrade nvidia-driver-96Upgrade nvidia-driver-173 | Dec 10, 2025 | Dec 14, 2014 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Dec 10, 2014 |
| Oracle Solaris | — | Upgrade image/nvidia/cg-toolkit to version 3.0.15-0.175.2.8.0.4.0 on Solaris 11.2Upgrade driver/graphics/nvidiaR340 to version 0.340.65.0-0.175.2.8.0.4.0 on Solaris 11.2Upgrade consolidation/X/X-incorporation to version 0.5.11-0.175.3.0.0.30.1483 on Solaris 11.3Upgrade x11/server/xorg to version 1.14.5-0.175.2.6.0.3.1423 on Solaris 11.2Upgrade x11/server/xephyr to version 1.14.5-0.175.2.6.0.3.1423 on Solaris 11.2Upgrade x11/server/xvnc to version 1.1.0-0.175.2.6.0.3.1423 on Solaris 11.2Upgrade x11/server/xvfb to version 1.14.5-0.175.2.6.0.3.1423 on Solaris 11.2Upgrade x11/library/mesa to version 9.0.3-0.175.2.6.0.2.1423 on Solaris 11.2Upgrade x11/server/xdmx to version 1.14.5-0.175.2.6.0.2.1423 on Solaris 11.2Upgrade driver/graphics/nvidiaR304 to version 0.304.125.0-0.175.2.8.0.4.0 on Solaris 11.2Upgrade driver/graphics/nvidia to version 0.346.35.0-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Dec 10, 2014 |
| Oracle_linux | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sdk | Oct 16, 2024 | Dec 10, 2014 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-Xvnc | Dec 18, 2015 | Dec 10, 2014 |
| Ubuntu | — | Upgrade xserver-xorg-core-lts-trustyUpgrade nvidia-331-updatesUpgrade nvidia-331Upgrade nvidia-304Upgrade xserver-xorg-coreUpgrade nvidia-304-updates | Nov 8, 2024 | Dec 10, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub