The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xorg-x11Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-twmUpgrade xorg-x11-server-XorgUpgrade xorg-x11-deprecated-libs-develUpgrade xorg-x11-toolsUpgrade xorg-x11-XvfbUpgrade xorg-x11-docUpgrade xorg-x11-xdmUpgrade xorg-x11-server-XnestUpgrade xorg-x11-deprecated-libsUpgrade xorg-x11-xauthUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-Mesa-libGLUpgrade xorg-x11-xfsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-Mesa-libGLUUpgrade xorg-x11-XnestUpgrade xorg-x11-XdmxUpgrade xorg-x11-develUpgrade xorg-x11-sdkUpgrade xorg-x11-server-sdkUpgrade xorg-x11-libsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-font-utils | Dec 1, 2016 | Sep 5, 2012 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Sep 5, 2012 |
| Ibm Aix | — | Apply the fix or workaround for X_advisory2 | Nov 30, 2017 | Sep 5, 2012 |
| Oracle_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvnc-source | Oct 16, 2024 | Sep 5, 2012 |
| Suse | — | Upgrade xorg-x11-XnestUpgrade xorg-x11-xvncUpgrade xorg-x11-libs-64bitUpgrade xorg-x11-devel-64bitUpgrade xorg-x11-devel-32bitUpgrade xorg-x11-serverUpgrade xorg-x11-sdkUpgrade xorg-x11-fonts-syriacUpgrade xorg-x11-fonts-scalableUpgrade xorg-x11-libsUpgrade xorg-x11-server-glxUpgrade xorg-x11-docUpgrade xorg-x11Upgrade xorg-x11-fonts-75dpiUpgrade xorg-x11-libs-32bitUpgrade xorg-x11-libs-x86Upgrade xorg-x11-XvfbUpgrade xorg-x11-fonts-100dpiUpgrade xorg-x11-fonts-cyrillicUpgrade xorg-x11-manUpgrade xorg-x11-devel | Dec 12, 2013 | Sep 5, 2012 |
| Ubuntu | — | Upgrade xserver-xorg-core | Nov 8, 2024 | Sep 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub