Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mesa-sourceUpgrade mesa-demosUpgrade mesa-dri-driversUpgrade mesa-libGLwUpgrade mesa-libGLUUpgrade mesa-libGLUpgrade mesa-libGLU-develUpgrade glx-utilsUpgrade mesa-dri-filesystemUpgrade mesa-libOSMesaUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-develUpgrade mesa-libGLw-devel | Dec 1, 2016 | Jun 15, 2013 |
| Debian | — | Upgrade mesa | Jul 30, 2024 | Jun 15, 2013 |
| Freebsd | — | Upgrade libXvUpgrade libXrandrUpgrade libXtUpgrade xf86-video-openchromeUpgrade libXxf86dgaUpgrade libXineramaUpgrade libXvMCUpgrade libX11Upgrade libXtstUpgrade libXfixesUpgrade libXrenderUpgrade libXcursorUpgrade libXextUpgrade libXxf86vmUpgrade libFSUpgrade libxcbUpgrade libdmxUpgrade libGLUpgrade libXresUpgrade libXpUpgrade libXi | Dec 10, 2025 | Jun 4, 2013 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Jun 15, 2013 |
| Oracle Solaris | — | Upgrade x11/library/libxvmc to version 1.0.7-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxtst to version 1.2.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxv to version 1.0.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxfixes to version 5.0-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libx11 to version 1.5.0-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxres to version 1.0.6-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libfs to version 1.0.4-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxp to version 1.0.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxext to version 1.3.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxrandr to version 1.3.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxi to version 1.6.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxxf86vm to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxcb to version 1.8.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxinerama to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxrender to version 0.9.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libdmx to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/toolkit/libxt to version 1.1.3-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/mesa to version 7.11.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxcursor to version 1.1.13-0.175.1.8.0.3.1332 on Solaris 11.1 | May 29, 2017 | Jun 15, 2013 |
| Oracle_linux | — | Upgrade mesa-libOSMesaUpgrade mesa-libGLUUpgrade mesa-libGLUpgrade mesa-libOSMesa-develUpgrade mesa-libGL-develUpgrade glx-utilsUpgrade mesa-libGLwUpgrade mesa-libGLw-develUpgrade mesa-libGLU-develUpgrade mesa-source | Oct 16, 2024 | Jun 15, 2013 |
| Suse | — | Upgrade libOSMesa8-32bitUpgrade Mesa-libGLESv1_CM-devel-32bitUpgrade Mesa-libGLU1-32bitUpgrade Mesa-develUpgrade Mesa-libGL1-32bitUpgrade libvdpau_r300-32bitUpgrade libXvMC_r600-32bitUpgrade Mesa-libEGL1Upgrade Mesa-libEGL-devel-32bitUpgrade Mesa-libIndirectGL-develUpgrade Mesa-libglapi-develUpgrade Mesa-libIndirectGL-devel-32bitUpgrade Mesa-libGL1Upgrade MesaUpgrade libvdpau_softpipe-32bitUpgrade Mesa-libGL-devel-32bitUpgrade libXvMC_r300-32bitUpgrade Mesa-libGL-develUpgrade Mesa-libglapi-devel-32bitUpgrade libOSMesa9Upgrade Mesa-libGLESv1_CM1Upgrade libxatracker1Upgrade Mesa-libGLU1Upgrade libOSMesa8Upgrade Mesa-32bitUpgrade Mesa-libglapi0-32bitUpgrade Mesa-libGLESv2-2-32bitUpgrade libvdpau_nouveauUpgrade libXvMC_softpipe-32bitUpgrade Mesa-libGLU-develUpgrade libXvMC_softpipeUpgrade libOSMesa9-32bitUpgrade Mesa-libGLU-devel-32bitUpgrade libvdpau_r300Upgrade Mesa-libGLESv1_CM-develUpgrade libvdpau_softpipeUpgrade libXvMC_nouveau-32bitUpgrade libXvMC_r600Upgrade libvdpau_r600Upgrade Mesa-libGLESv2-2Upgrade Mesa-64bitUpgrade libvdpau_nouveau-32bitUpgrade Mesa-libglapi0Upgrade libOSMesa-devel-32bitUpgrade libgbm-devel-32bitUpgrade Mesa-libGLESv2-develUpgrade libXvMC_r300Upgrade sle-sdk-releaseUpgrade Mesa-libIndirectGL1-32bitUpgrade Mesa-devel-32bitUpgrade Mesa-libGLESv1_CM1-32bitUpgrade libOSMesa-develUpgrade libXvMC_nouveauUpgrade Mesa-libGLESv2-devel-32bitUpgrade libgbm1Upgrade libvdpau_r600-32bitUpgrade Mesa-libEGL1-32bitUpgrade Mesa-devel-64bitUpgrade libgbm-develUpgrade Mesa-libIndirectGL1Upgrade libxatracker-develUpgrade libgbm1-32bitUpgrade Mesa-x86Upgrade Mesa-libEGL-devel | Dec 12, 2013 | Jun 15, 2013 |
| Ubuntu | — | Upgrade libopenvg1-mesa-lts-quantalUpgrade libosmesa6Upgrade libegl1-mesaUpgrade libglapi-mesaUpgrade libgles1-mesaUpgrade libgles2-mesa-lts-quantalUpgrade libglapi-mesa-lts-quantalUpgrade libopenvg1-mesaUpgrade libgl1-mesa-glxUpgrade libgbm1Upgrade libegl1-mesa-lts-quantalUpgrade libgles1-mesa-lts-quantalUpgrade libgbm1-lts-quantalUpgrade libxatracker1-lts-quantalUpgrade libgles2-mesaUpgrade libglu1-mesaUpgrade libxatracker1Upgrade libgl1-mesa-dri-lts-quantalUpgrade libgl1-mesa-driUpgrade libgl1-mesa-swx11Upgrade libgl1-mesa-glx-lts-quantal | Nov 8, 2024 | Jun 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub