Xorg-x11-server: use-after-free in procrenderaddglyphs
Priority MEDIUM 40CWE-416Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 23 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.
Summary
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01859 79th percentileScored 2026-11-07
Fix Partial Red Hat: 16 advisoriesRed Hat: 23 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | xorg-x11-server | 21.1.12 | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | — | 1.1.0-25.el6_10.13 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | 1.20.4-29.el7_9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | 1.8.0-33.el7_9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 1.13.1-2.el8_9.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 1.20.11-23.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 1.13.1-10.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 21.1.3-16.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | — | 1.9.0-15.el8_2.11 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | — | 1.9.0-15.el8_2.11 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | — | 1.9.0-15.el8_2.11 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 1.11.0-8.el8_4.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | — | 1.11.0-8.el8_4.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | — | 1.11.0-8.el8_4.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | — | 1.12.0-6.el8_6.11 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | 1.12.0-15.el8_8.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 1.13.1-8.el9_4.3 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 23.2.7-1.el9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 1.20.11-26.el9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | — | 1.11.0-22.el9_0.11 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 1.12.0-14.el9_2.8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
- xorg-x11-server Vendor— Affected 21.1.12 Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION VendorRed Hat Affected — Fixed in 1.1.0-25.el6_10.13 Patch available CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 1.20.4-29.el7_9 Patch available CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 1.8.0-33.el7_9 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.13.1-2.el8_9.10 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.20.11-23.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.13.1-10.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 21.1.3-16.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 1.9.0-15.el8_2.11 Patch available CNA
- Red Hat Enterprise Linux 8.2 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.9.0-15.el8_2.11 Patch available CNA
- Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.9.0-15.el8_2.11 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.10 Patch available CNA
- Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.10 Patch available CNA
- Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.10 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.11 Patch available CNA
- Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 1.12.0-15.el8_8.10 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.13.1-8.el9_4.3 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 23.2.7-1.el9 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.20.11-26.el9 Patch available CNA
- Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 1.11.0-22.el9_0.11 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 1.12.0-14.el9_2.8 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE names CNA · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:rhel_els:6 | 6 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:7::client | 7 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:7::computenode | 7 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:7::server | 7 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:7::workstation | 7 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::appstream | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::crb | 8 | — | Red Hat |
| cpe:/a:redhat:rhel_aus:8.2::appstream | 8.2 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:8.2::appstream | 8.2 | — | Red Hat |
| cpe:/a:redhat:rhel_tus:8.2::appstream | 8.2 | — | Red Hat |
- cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:7::client Versions 7 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:7::computenode Versions 7 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:7::server Versions 7 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:7::workstation Versions 7 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
- cpe:/a:redhat:rhel_aus:8.2::appstream Versions 8.2 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:8.2::appstream Versions 8.2 — ·Red Hat
- cpe:/a:redhat:rhel_tus:8.2::appstream Versions 8.2 — ·Red Hat
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:rhel_aus:8.4::appstream | 8.4 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:8.4::appstream | 8.4 | — | Red Hat |
| cpe:/a:redhat:rhel_tus:8.4::appstream | 8.4 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:8.6::appstream | 8.6 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:8.8::appstream | 8.8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::crb | 9 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.0::appstream | 9.0 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.2::appstream | 9.2 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:10 | 10 | — | Red Hat |
- cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:8.4::appstream Versions 8.4 — ·Red Hat
- cpe:/a:redhat:rhel_tus:8.4::appstream Versions 8.4 — ·Red Hat
- cpe:/a:redhat:rhel_eus:8.6::appstream Versions 8.6 — ·Red Hat
- cpe:/a:redhat:rhel_eus:8.8::appstream Versions 8.8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.0::appstream Versions 9.0 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.2::appstream Versions 9.2 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat
Remediation
Red Hat 16 advisories
- RHSA-2025:12751 Released 2025-08-04 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) tigervnc-1.1.0-25.el6_10.13, tigervnc-server-1.1.0-25.el6_10.13
- Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) tigervnc-server-applet-1.1.0-25.el6_10.13, tigervnc-server-module-1.1.0-25.el6_10.13
- RHSA-2024:9122 Released 2024-11-12 · Red Hat rating Moderatexorg-x11-server security update
- Red Hat CodeReady Linux Builder (v. 9) xorg-x11-server-devel-1.20.11-26.el9, xorg-x11-server-source-1.20.11-26.el9
- Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-1.20.11-26.el9, xorg-x11-server-Xdmx-1.20.11-26.el9, xorg-x11-server-Xephyr-1.20.11-26.el9 +4
- RHSA-2024:9093 Released 2024-11-12 · Red Hat rating Moderatexorg-x11-server-Xwayland security update
- Red Hat CodeReady Linux Builder (v. 9) xorg-x11-server-Xwayland-23.2.7-1.el9, xorg-x11-server-Xwayland-devel-23.2.7-1.el9
- Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-Xwayland-23.2.7-1.el9
Show 13 more Red Hat advisories
- RHSA-2024:3343 Released 2024-05-23 · Red Hat rating Importantxorg-x11-server-Xwayland security update
- Red Hat Enterprise Linux AppStream (v. 8) xorg-x11-server-Xwayland-21.1.3-16.el8_10
- RHSA-2024:3261 Released 2024-05-22 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream (v. 8) tigervnc-1.13.1-10.el8_10, tigervnc-icons-1.13.1-10.el8_10, tigervnc-license-1.13.1-10.el8_10 +4
- RHSA-2024:3258 Released 2024-05-22 · Red Hat rating Moderatexorg-x11-server security update
- Red Hat Enterprise Linux AppStream (v. 8) xorg-x11-server-1.20.11-23.el8_10, xorg-x11-server-Xdmx-1.20.11-23.el8_10, xorg-x11-server-Xephyr-1.20.11-23.el8_10 +4
- Red Hat Enterprise Linux CRB (v. 8) xorg-x11-server-devel-1.20.11-23.el8_10, xorg-x11-server-source-1.20.11-23.el8_10
- RHSA-2024:2616 Released 2024-04-30 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream (v. 9) tigervnc-1.13.1-8.el9_4.3, tigervnc-icons-1.13.1-8.el9_4.3, tigervnc-license-1.13.1-8.el9_4.3 +4
- RHSA-2024:2080 Released 2024-04-29 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux Client (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
- Red Hat Enterprise Linux Client Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-server-1.8.0-33.el7_9 +2
- Red Hat Enterprise Linux Server (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
- Red Hat Enterprise Linux Server Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9
- RHSA-2024:2038 Released 2024-04-24 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) tigervnc-1.12.0-15.el8_8.10, tigervnc-icons-1.12.0-15.el8_8.10, tigervnc-license-1.12.0-15.el8_8.10 +4
- RHSA-2024:2040 Released 2024-04-24 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) tigervnc-1.12.0-14.el9_2.8, tigervnc-icons-1.12.0-14.el9_2.8, tigervnc-license-1.12.0-14.el9_2.8 +4
- RHSA-2024:2042 Released 2024-04-24 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) tigervnc-1.11.0-8.el8_4.10, tigervnc-icons-1.11.0-8.el8_4.10, tigervnc-license-1.11.0-8.el8_4.10 +4
- Red Hat Enterprise Linux AppStream E4S (v.8.4) tigervnc-1.11.0-8.el8_4.10, tigervnc-icons-1.11.0-8.el8_4.10, tigervnc-license-1.11.0-8.el8_4.10 +4
- Red Hat Enterprise Linux AppStream TUS (v.8.4) tigervnc-1.11.0-8.el8_4.10, tigervnc-icons-1.11.0-8.el8_4.10, tigervnc-license-1.11.0-8.el8_4.10 +4
- RHSA-2024:2039 Released 2024-04-24 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream EUS (v.8.6) tigervnc-1.12.0-6.el8_6.11, tigervnc-icons-1.12.0-6.el8_6.11, tigervnc-license-1.12.0-6.el8_6.11 +4
- RHSA-2024:2041 Released 2024-04-24 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) tigervnc-1.9.0-15.el8_2.11, tigervnc-icons-1.9.0-15.el8_2.11, tigervnc-license-1.9.0-15.el8_2.11 +4
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) tigervnc-1.9.0-15.el8_2.11, tigervnc-icons-1.9.0-15.el8_2.11, tigervnc-license-1.9.0-15.el8_2.11 +4
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) tigervnc-1.9.0-15.el8_2.11, tigervnc-icons-1.9.0-15.el8_2.11, tigervnc-license-1.9.0-15.el8_2.11 +4
- RHSA-2024:2036 Released 2024-04-24 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream EUS (v.9.0) tigervnc-1.11.0-22.el9_0.11, tigervnc-icons-1.11.0-22.el9_0.11, tigervnc-license-1.11.0-22.el9_0.11 +4
- RHSA-2024:2037 Released 2024-04-24 · Red Hat rating Importanttigervnc security update
- Red Hat Enterprise Linux AppStream (v. 8) tigervnc-1.13.1-2.el8_9.10, tigervnc-icons-1.13.1-2.el8_9.10, tigervnc-license-1.13.1-2.el8_9.10 +4
- RHSA-2024:1785 Released 2024-04-11 · Red Hat rating ImportantX.Org server security update
- Red Hat Enterprise Linux Client (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
- Red Hat Enterprise Linux Client Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9 +7
- Red Hat Enterprise Linux Server (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +4
- Red Hat Enterprise Linux Workstation (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +3
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:1785
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2036
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
Show 13 more groups
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2037
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2038
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2039
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2040
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2041
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2042
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2080
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:2616
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:3258
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:3261
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:3343
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:9093
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 14 more products — RHSA-2024:9122
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-20469 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsPriority LOW 35
- TI-2024-20470 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicePriority LOW 33
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat CodeReady Linux Builder (v. 9) | Fixed | RHSA-2024:9093, RHSA-2024:9122 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:2037, RHSA-2024:3258, RHSA-2024:3261, RHSA-2024:3343 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:2616, RHSA-2024:9093, RHSA-2024:9122 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2024:2041 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2024:2042 |
| Red Hat Enterprise Linux AppStream E4S (v. 8.2) | Fixed | RHSA-2024:2041 |
| Red Hat Enterprise Linux AppStream E4S (v.8.4) | Fixed | RHSA-2024:2042 |
| Red Hat Enterprise Linux AppStream EUS (v.8.6) | Fixed | RHSA-2024:2039 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2024:2038 |
| Red Hat Enterprise Linux AppStream EUS (v.9.0) | Fixed | RHSA-2024:2036 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:2040 |
| Red Hat Enterprise Linux AppStream TUS (v. 8.2) | Fixed | RHSA-2024:2041 |
| Red Hat Enterprise Linux AppStream TUS (v.8.4) | Fixed | RHSA-2024:2042 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2024:3258 |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2024:1785, RHSA-2024:2080 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2024:1785, RHSA-2024:2080 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2024:1785, RHSA-2024:2080 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2024:1785, RHSA-2024:2080 |
| Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) | Fixed | RHSA-2025:12751 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2024:1785, RHSA-2024:2080 |
| Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) | Fixed | RHSA-2025:12751 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2024:1785, RHSA-2024:2080 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2024:1785, RHSA-2024:2080 |
Not affected: 1 product
- Red Hat Enterprise Linux 10
Timeline
- 2026-10-02 Threatist record created from CVE-2024-31083
- 2026-10-03 Alias added: GHSA-q6w6-rjjj-5p52
References
Advisory 16
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-31083 · CVE Program
- CVE-2024-31083 · NVD
- FIRST EPSS
- GHSA-q6w6-rjjj-5p52 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-31083 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences