libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libglvnd-openglUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade libglvndUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade libglvnd-debuginfo | Mar 10, 2025 | Mar 27, 2024 |
| Amazon_linux_2023 | — | Upgrade libglvndUpgrade libglvnd-glxUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-develUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-openglUpgrade libglvnd-core-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-debuginfoUpgrade libglvnd-debugsource | Feb 26, 2025 | Mar 27, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub