CVE-2024-31080 — Buffer Over-read in Xorg-server

CWE-126 — Buffer Over-read15 documents10 sources
Severity
7.3HIGHNVD
EPSS
0.1%
top 68.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
X.org Xorg-serverX.org Xwayland
Timeline
PublishedApr 4
Latest updateOct 15

Description

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resu…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:HExploitability: 1.8 | Impact: 5.5

Affected Packages4 packages

▶Debianx.org/xorg-server< 2:1.20.11-1+deb11u13+3
▶Ubuntux.org/xorg-server< 2:1.20.13-1ubuntu1~20.04.17+9
▶Debianx.org/xwayland< 2:23.2.6-1+1
▶Ubuntux.org/xwayland< 2:22.1.1-1ubuntu0.13+1

🔴Vulnerability Details

5
OSV
xorg-server, xwayland regression↗2024-04-09
▶
OSV
CVE-2024-31080: A heap-based buffer over-read vulnerability was found in the X↗2024-04-04
▶
OSV
xorg-server, xwayland vulnerabilities↗2024-04-04
▶
GHSA
GHSA-mqqf-4p7r-rf89: A heap-based buffer over-read vulnerability was found in the X↗2024-04-04
▶
CVEList
Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents↗2024-04-04
▶

📋Vendor Advisories

9
Oracle
Oracle Oracle Communications Risk Matrix: Platform (X.Org Server) — CVE-2024-31080↗2024-10-15
▶
Ubuntu
X.Org X Server regression↗2024-04-09
▶
Microsoft
Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents↗2024-04-09
▶
BSD
OpenBSD 7.4 Errata 016: SECURITY FIX↗2024-04-08
▶
BSD
OpenBSD 7.5 Errata 001: SECURITY FIX↗2024-04-08
▶
CVE-2024-31080 — Buffer Over-read in X.org Xorg-server | cvebase