Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-31080

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • xorg-server

    From 29.1.0

  • tigervnc

    Version range not reported

  • xorg-x11-server

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • xorg-x11-server

    Version range not reported

  • tigervnc

    Version range not reported

  • xorg-x11-server-Xwayland

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • xorg-x11-server-Xwayland

    Version range not reported

  • xorg-x11-server

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • tigervnc

    Version range not reported

  • xorg-x11-server

    Version range not reported

  • xorg-x11-server-Xwayland

    Version range not reported

  • xorg-x11-server

    Version range not reported

References 18

access.redhat.com

bugzilla.redhat.com