High 7.3

xorg-server にヒープ領域の過剰読み取りによる情報漏えいの脆弱性

CVE-2024-31080 First seen on SecPulse Apr 4, 2024

Summary

2024年4月に公表された、X.Org Serverのヒープ領域の過剰読み取りによる脆弱性です。攻撃者はX serverに大量の不正な読み取りを行わせ、メモリの内容が漏えいしたりサーバーがクラッシュしたりするおそれがあります。対象はxorg-server 29.1.0以降ですが、修正版は確認できていないため、最新の情報を確認してください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
GitLab	GitLabxorg-server	≥ 29.1.0 (no fix yet)→ Not listed	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 7	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8.6 Extended Update Support	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 8.8 Extended Update Support	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 9	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 9.0 Extended Update Support	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 9.2 Extended Update Support	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 10	—	Not listed
Red Hat	Red HatRed Hat Enterprise Linux 6	—	Not listed

This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.

Fix status by distribution

Records published by each distribution for this CVE. Fixed versions differ by release; check each link.

Alpine Linux ALPINE-CVE-2024-31080 xwayland, xorg-server Fix available
Debian DEBIAN-CVE-2024-31080 xwayland, xorg-server Fix available

Original description The description as published by the source.

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Source: CVE.org (CVE Program・cvelistV5) NVD

Summary

AI summary

Affected packages

Fix status by distribution

References