PT-2024-2942 · Unknown+5 · Xorg-Server+5
Alan Coopersmith
·
Published
2024-03-04
·
Updated
2024-11-13
·
CVE-2024-31082
CVSS v3.1
7.3
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Xorg-server (affected versions not specified)
Description
A heap-based buffer over-read issue was found in the X.org server's
ProcAppleDRICreatePixmap() function. This occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, especially when triggered by a client with different endianness. An attacker could exploit this to cause the X server to read heap memory values and transmit them back to the client until encountering an unmapped page, resulting in a crash. Although the attacker cannot control the specific memory copied into the replies, small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads. This could allow an attacker to access confidential data, compromise their integrity, and cause a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Over-read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Red Os
Suse
Ubuntu
Xorg-Server