Read the docs
TI-2024-20470 Aliases CVE-2024-31081GHSA-3fpg-j8cw-vcjq

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

Priority LOW 33CWE-126Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · Low · High
Fix status
Partial Red Hat: 23 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00517 44th percentileScored 2026-11-07
Fix Partial Red Hat: 16 advisoriesRed Hat: 23 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—xorg-server1.7.0—No fix listedCNA
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION—1.1.0-25.el6_10.13Patch availableCNA
Red HatRed Hat Enterprise Linux 7—1.20.4-29.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 7—1.8.0-33.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.13.1-2.el8_9.10Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.20.11-23.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.13.1-10.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8—21.1.3-16.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—1.9.0-15.el8_2.11Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service—1.9.0-15.el8_2.11Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions—1.9.0-15.el8_2.11Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—1.11.0-8.el8_4.10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—1.11.0-8.el8_4.10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—1.11.0-8.el8_4.10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—1.12.0-6.el8_6.11Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—1.12.0-15.el8_8.10Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.13.1-8.el9_4.3Patch availableCNA
Red HatRed Hat Enterprise Linux 9—23.2.7-1.el9Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.20.11-26.el9Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—1.11.0-22.el9_0.11Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—1.12.0-14.el9_2.8Patch availableCNA
Red HatRed Hat Enterprise Linux 10——Not affectedCNA
Red HatRed Hat Enterprise Linux 10——Not affectedCNA
Red HatRed Hat Enterprise Linux 10——Not affectedCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
  • xorg-server Vendor— Affected 1.7.0 Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION VendorRed Hat Affected — Fixed in 1.1.0-25.el6_10.13 Patch available CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 1.20.4-29.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 1.8.0-33.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.13.1-2.el8_9.10 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.20.11-23.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.13.1-10.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 21.1.3-16.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 1.9.0-15.el8_2.11 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.9.0-15.el8_2.11 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.9.0-15.el8_2.11 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.10 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.10 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.10 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.11 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 1.12.0-15.el8_8.10 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.13.1-8.el9_4.3 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 23.2.7-1.el9 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.20.11-26.el9 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 1.11.0-22.el9_0.11 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 1.12.0-14.el9_2.8 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE names CNA · 20

CPEVersionsRoleVendor
cpe:/o:redhat:rhel_els:66—Red Hat
cpe:/o:redhat:enterprise_linux:7::client7—Red Hat
cpe:/o:redhat:enterprise_linux:7::computenode7—Red Hat
cpe:/o:redhat:enterprise_linux:7::server7—Red Hat
cpe:/o:redhat:enterprise_linux:7::workstation7—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/a:redhat:enterprise_linux:8::crb8—Red Hat
cpe:/a:redhat:rhel_aus:8.2::appstream8.2—Red Hat
cpe:/a:redhat:rhel_e4s:8.2::appstream8.2—Red Hat
cpe:/a:redhat:rhel_tus:8.2::appstream8.2—Red Hat
  • cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::client Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::computenode Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::server Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::workstation Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.2::appstream Versions 8.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.2::appstream Versions 8.2 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.2::appstream Versions 8.2 — ·Red Hat
Show 10 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:rhel_aus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_e4s:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_tus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_eus:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_eus:8.8::appstream8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/a:redhat:enterprise_linux:9::crb9—Red Hat
cpe:/a:redhat:rhel_eus:9.0::appstream9.0—Red Hat
cpe:/a:redhat:rhel_eus:9.2::appstream9.2—Red Hat
cpe:/a:redhat:enterprise_linux:1010—Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.0::appstream Versions 9.0 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat

Remediation

Red Hat 16 advisories

  • RHSA-2025:12751 Released 2025-08-04 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) tigervnc-1.1.0-25.el6_10.13, tigervnc-server-1.1.0-25.el6_10.13
    • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) tigervnc-server-applet-1.1.0-25.el6_10.13, tigervnc-server-module-1.1.0-25.el6_10.13
  • RHSA-2024:9122 Released 2024-11-12 · Red Hat rating Moderate
    xorg-x11-server security update
    • Red Hat CodeReady Linux Builder (v. 9) xorg-x11-server-devel-1.20.11-26.el9, xorg-x11-server-source-1.20.11-26.el9
    • Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-1.20.11-26.el9, xorg-x11-server-Xdmx-1.20.11-26.el9, xorg-x11-server-Xephyr-1.20.11-26.el9 +4
  • RHSA-2024:9093 Released 2024-11-12 · Red Hat rating Moderate
    xorg-x11-server-Xwayland security update
    • Red Hat CodeReady Linux Builder (v. 9) xorg-x11-server-Xwayland-23.2.7-1.el9, xorg-x11-server-Xwayland-devel-23.2.7-1.el9
    • Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-Xwayland-23.2.7-1.el9
Show 13 more Red Hat advisories
  • RHSA-2024:3343 Released 2024-05-23 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream (v. 8) xorg-x11-server-Xwayland-21.1.3-16.el8_10
  • RHSA-2024:3261 Released 2024-05-22 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream (v. 8) tigervnc-1.13.1-10.el8_10, tigervnc-icons-1.13.1-10.el8_10, tigervnc-license-1.13.1-10.el8_10 +4
  • RHSA-2024:3258 Released 2024-05-22 · Red Hat rating Moderate
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream (v. 8) xorg-x11-server-1.20.11-23.el8_10, xorg-x11-server-Xdmx-1.20.11-23.el8_10, xorg-x11-server-Xephyr-1.20.11-23.el8_10 +4
    • Red Hat Enterprise Linux CRB (v. 8) xorg-x11-server-devel-1.20.11-23.el8_10, xorg-x11-server-source-1.20.11-23.el8_10
  • RHSA-2024:2616 Released 2024-04-30 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream (v. 9) tigervnc-1.13.1-8.el9_4.3, tigervnc-icons-1.13.1-8.el9_4.3, tigervnc-license-1.13.1-8.el9_4.3 +4
  • RHSA-2024:2080 Released 2024-04-29 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux Client (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
    • Red Hat Enterprise Linux Client Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-server-1.8.0-33.el7_9 +2
    • Red Hat Enterprise Linux Server (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
    • Red Hat Enterprise Linux Server Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9
    • Red Hat Enterprise Linux Workstation (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
    • Red Hat Enterprise Linux Workstation Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9
  • RHSA-2024:2038 Released 2024-04-24 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) tigervnc-1.12.0-15.el8_8.10, tigervnc-icons-1.12.0-15.el8_8.10, tigervnc-license-1.12.0-15.el8_8.10 +4
  • RHSA-2024:2040 Released 2024-04-24 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) tigervnc-1.12.0-14.el9_2.8, tigervnc-icons-1.12.0-14.el9_2.8, tigervnc-license-1.12.0-14.el9_2.8 +4
  • RHSA-2024:2042 Released 2024-04-24 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) tigervnc-1.11.0-8.el8_4.10, tigervnc-icons-1.11.0-8.el8_4.10, tigervnc-license-1.11.0-8.el8_4.10 +4
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) tigervnc-1.11.0-8.el8_4.10, tigervnc-icons-1.11.0-8.el8_4.10, tigervnc-license-1.11.0-8.el8_4.10 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) tigervnc-1.11.0-8.el8_4.10, tigervnc-icons-1.11.0-8.el8_4.10, tigervnc-license-1.11.0-8.el8_4.10 +4
  • RHSA-2024:2039 Released 2024-04-24 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) tigervnc-1.12.0-6.el8_6.11, tigervnc-icons-1.12.0-6.el8_6.11, tigervnc-license-1.12.0-6.el8_6.11 +4
  • RHSA-2024:2041 Released 2024-04-24 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) tigervnc-1.9.0-15.el8_2.11, tigervnc-icons-1.9.0-15.el8_2.11, tigervnc-license-1.9.0-15.el8_2.11 +4
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) tigervnc-1.9.0-15.el8_2.11, tigervnc-icons-1.9.0-15.el8_2.11, tigervnc-license-1.9.0-15.el8_2.11 +4
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) tigervnc-1.9.0-15.el8_2.11, tigervnc-icons-1.9.0-15.el8_2.11, tigervnc-license-1.9.0-15.el8_2.11 +4
  • RHSA-2024:2036 Released 2024-04-24 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) tigervnc-1.11.0-22.el9_0.11, tigervnc-icons-1.11.0-22.el9_0.11, tigervnc-license-1.11.0-22.el9_0.11 +4
  • RHSA-2024:2037 Released 2024-04-24 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream (v. 8) tigervnc-1.13.1-2.el8_9.10, tigervnc-icons-1.13.1-2.el8_9.10, tigervnc-license-1.13.1-2.el8_9.10 +4
  • RHSA-2024:1785 Released 2024-04-11 · Red Hat rating Important
    X.Org server security update
    • Red Hat Enterprise Linux Client (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
    • Red Hat Enterprise Linux Client Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +3
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9 +7
    • Red Hat Enterprise Linux Server (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
    • Red Hat Enterprise Linux Server Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +4
    • Red Hat Enterprise Linux Workstation (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
    • Red Hat Enterprise Linux Workstation Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:1785

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2036

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
Show 13 more groups
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2037

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2038

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2039

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2040

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2041

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2042

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2080

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2616

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:3258

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:3261

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:3343

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:9093

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:9122

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2024-20472 Xorg-x11-server: use-after-free in procrenderaddglyphsPriority MEDIUM 40
    • TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
    Show all 3 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2024:9093, RHSA-2024:9122
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:2037, RHSA-2024:3258, RHSA-2024:3261, RHSA-2024:3343
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:2616, RHSA-2024:9093, RHSA-2024:9122
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2024:2041
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2024:2042
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2024:2041
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2024:2042
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:2039
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:2038
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2024:2036
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:2040
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2024:2041
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2024:2042
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2024:3258
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2024:1785, RHSA-2024:2080
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2024:1785, RHSA-2024:2080
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2024:1785, RHSA-2024:2080
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:1785, RHSA-2024:2080
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2025:12751
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2024:1785, RHSA-2024:2080
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)Fixed RHSA-2025:12751
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:1785, RHSA-2024:2080
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2024:1785, RHSA-2024:2080
Not affected: 1 product
  • Red Hat Enterprise Linux 10

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-31081
  2. 2026-10-03 Alias added: GHSA-3fpg-j8cw-vcjq

References

Advisory 16

Other 2

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences