Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-server | Aug 30, 2017 | Jan 18, 2014 |
| Centos_linux | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xnest | Dec 1, 2016 | Jan 18, 2014 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Jan 18, 2014 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Jan 18, 2014 |
| Oracle_linux | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xvnc-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-source | Oct 16, 2024 | Jan 18, 2014 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-XvncUpgrade sle-sdk-release | Jan 9, 2014 | Jan 9, 2014 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-lts-trusty | Nov 8, 2024 | Jan 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub