Description

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.

INFO

Published Date :

2024-04-05T12:04:49.414Z

Last Modified :

2025-11-20T07:19:07.523Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2024-31083 vulnerability.

Vendors Products
Redhat
  • Enterprise Linux
  • Rhel Aus
  • Rhel E4s
  • Rhel Els
  • Rhel Eus
  • Rhel Tus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-31083.

URL Resource
http://www.openwall.com/lists/oss-security/2024/04/03/13 cve-icon
http://www.openwall.com/lists/oss-security/2024/04/12/10 cve-icon
https://access.redhat.com/errata/RHSA-2024:1785 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2036 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2037 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2038 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2039 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2040 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2041 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2042 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2080 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:2616 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:3258 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:3261 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:3343 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:9093 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:9122 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:12751 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2024-31083 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2272000 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/ cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-31083 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-31083 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact