The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xorg-x11-deprecated-libsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-XvfbUpgrade xorg-x11Upgrade xorg-x11-toolsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-twmUpgrade xorg-x11-xauthUpgrade xorg-x11-deprecated-libs-develUpgrade xorg-x11-docUpgrade xorg-x11-xdmUpgrade xorg-x11-XdmxUpgrade xorg-x11-libsUpgrade xorg-x11-Mesa-libGLUpgrade xorg-x11-server-sdkUpgrade xorg-x11-xfsUpgrade xorg-x11-develUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-XnestUpgrade xorg-x11-sdkUpgrade xorg-x11-Mesa-libGLUUpgrade xorg-x11-font-utilsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr | Dec 1, 2016 | Sep 5, 2012 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Sep 5, 2012 |
| Ibm Aix | — | Apply the fix or workaround for X_advisory2 | Nov 30, 2017 | Sep 5, 2012 |
| Oracle_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xnest | Oct 16, 2024 | Sep 5, 2012 |
| Suse | — | Upgrade xorg-x11-XvncUpgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdk | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xserver-xorg-core | Nov 8, 2024 | Sep 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub