Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-server | Aug 30, 2017 | Oct 10, 2013 |
| Centos_linux | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-common | Dec 1, 2016 | Oct 10, 2013 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Oct 10, 2013 |
| Freebsd | — | Upgrade xorg-server | Dec 10, 2025 | Oct 24, 2013 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Oct 10, 2013 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory2 | Nov 30, 2017 | Oct 10, 2013 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.12.2-0.175.1.17.0.3.1348 on Solaris 11.1Upgrade x11/server/xvfb to version 1.12.2-0.175.1.17.0.3.1348 on Solaris 11.1Upgrade x11/server/xorg to version 1.12.2-0.175.1.17.0.3.1348 on Solaris 11.1Upgrade x11/server/xvnc to version 1.1.0-0.175.1.17.0.3.1348 on Solaris 11.1 | May 29, 2017 | Oct 10, 2013 |
| Oracle_linux | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-sdk | Oct 16, 2024 | Oct 10, 2013 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extraUpgrade sle-sdk-release | Dec 12, 2013 | Oct 10, 2013 |
| Ubuntu | — | Upgrade xserver-xorg-core-lts-quantalUpgrade xserver-xorg-core-lts-raringUpgrade xserver-xorg-core | Nov 8, 2024 | Oct 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub