The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via (1) a crafted request that triggers a client swap in glx/glxcmdsswap.c; or (2) a crafted length or (3) a negative value in the screen field in a request to glx/glxcmds.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xorg-x11-XvfbUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11Upgrade xorg-x11-sdkUpgrade xorg-x11-libsUpgrade xorg-x11-deprecated-libs-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-Mesa-libGLUUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-Mesa-libGLUpgrade xorg-x11-font-utilsUpgrade xorg-x11-deprecated-libsUpgrade xorg-x11-XdmxUpgrade xorg-x11-xfsUpgrade xorg-x11-xauthUpgrade xorg-x11-docUpgrade xorg-x11-toolsUpgrade xorg-x11-XnestUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-xdmUpgrade xorg-x11-develUpgrade xorg-x11-twm | Dec 1, 2016 | Sep 5, 2012 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Sep 5, 2012 |
| Oracle_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-devel | Oct 16, 2024 | Sep 5, 2012 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-Xvnc | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xserver-xorg-core | Nov 8, 2024 | Sep 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub