Every CVE Search/ Get API key

CVE-2024-31082

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

7.3 HighFix available

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
Low
Availability
High

Exploit likelihood

0.34%Up 0.3 points since Apr 5, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.3

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
CVE-2024-31082
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Weakness
CWE-126
Updated
2026-11-04
EUVDEUVD-2024-28993 7.3

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
EUVD-2024-28993
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-cm2m-f7gc-hv64 7.3

A heap-based buffer over-read vulnerability was found in the X.org server's...

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
GHSA-cm2m-f7gc-hv64
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Weakness
CWE-126
Updated
2026-11-02
NVD 7.3

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
CVE-2024-31082
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Weakness
CWE-126
Updated
2026-11-04
OSVALPINE-CVE-2024-31082 7.3

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
ALPINE-CVE-2024-31082
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-03
OSVBELL-CVE-2024-31082 7.3
Record
BELL-CVE-2024-31082
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
Show 12 moreShow less
OSV 7.3

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
CVE-2024-31082
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Weakness
CWE-126
Updated
2026-11-05
OSVDEBIAN-CVE-2024-31082 7.3

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
DEBIAN-CVE-2024-31082
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-05
OSVOESA-2024-1416 7.8

xorg-x11-server security update

X.Org X11 X server

Security Fix(es):

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.(CVE-2024-31080)

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.(CVE-2024-31081)

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.(CVE-2024-31082)

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.(CVE-2024-31083)

Record
OESA-2024-1416
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-31082 7.3

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
UBUNTU-CVE-2024-31082
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVAZL-39112 No score

CVE-2024-31082 affecting package xorg-x11-server for versions less than 1.20.10-11

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
AZL-39112
Updated
2026-11-02
OSVAZL-45393 No score

CVE-2024-31082 affecting package xorg-x11-server 1.20.10-6

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.

Record
AZL-45393
Updated
2026-11-05
OSVopenSUSE-SU-2024:13828-1 No score

xorg-x11-server-21.1.12-1.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.12-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13828-1
Updated
2026-11-02
OSVSUSE-SU-2024:1199-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length (bsc#1222309).
  • CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply (bsc#1222310).
  • CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use unswapped length to send reply (bsc#1222311).
  • CVE-2024-31083: Fixed refcounting of glyphs during ProcRenderAddGlyphs (bsc#1222312).
Record
SUSE-SU-2024:1199-1
Updated
2026-11-02
OSVSUSE-SU-2024:1260-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length (bsc#1222309).
  • CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply (bsc#1222310).
  • CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use unswapped length to send reply (bsc#1222311).
  • CVE-2024-31083: Fixed refcounting of glyphs during ProcRenderAddGlyphs (bsc#1222312).

Other fixes:

  • Fixed regression for security fix for CVE-2024-31083 when using Android Studio (bnc#1222442)
Record
SUSE-SU-2024:1260-1
Updated
2026-11-02
OSVSUSE-SU-2024:1261-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length (bsc#1222309).
  • CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply (bsc#1222310).
  • CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use unswapped length to send reply (bsc#1222311).
  • CVE-2024-31083: Fixed refcounting of glyphs during ProcRenderAddGlyphs (bsc#1222312).

Other fixes:

  • Fixed regression for security fix for CVE-2024-31083 when using Android Studio (bnc#1222442)
Record
SUSE-SU-2024:1261-1
Updated
2026-11-02
OSVSUSE-SU-2024:1262-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length (bsc#1222309).
  • CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply (bsc#1222310).
  • CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use unswapped length to send reply (bsc#1222311).
  • CVE-2024-31083: Fixed refcounting of glyphs during ProcRenderAddGlyphs (bsc#1222312).

Other fixes:

  • Fixed regression for security fix for CVE-2024-31083 when using Android Studio (bnc#1222442)
Record
SUSE-SU-2024:1262-1
Updated
2026-11-02
OSVUSN-6721-1 No score

xorg-server, xwayland vulnerabilities

It was discovered that X.Org X Server incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information. (CVE-2024-31080, CVE-2024-31081, CVE-2024-31082)

It was discovered that X.Org X Server incorrectly handled certain glyphs. An attacker could possibly use this issue to cause a crash or expose sensitive information. (CVE-2024-31083)

Record
USN-6721-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xorg-server
Alpine:v3.19
 before 21.1.12-r0
21.1.12-r0
xorg-server
Alpine:v3.20
 before 21.1.12-r0
21.1.12-r0
xorg-server
Alpine:v3.21
 before 21.1.12-r0
21.1.12-r0
xorg-server
Alpine:v3.22
 before 21.1.12-r0
21.1.12-r0
xorg-server
Alpine:v3.23
 before 21.1.12-r0
21.1.12-r0
xorg-server
Alpine:v3.24
 before 21.1.12-r0
21.1.12-r0
xorg-x11-server
Azure Linux:2
 before 1.20.10-11
1.20.10-11
xorg-x11-server
Azure Linux:3
 through 1.20.10-6 None known
xorg-server
Alpaquita:23
 21.1.4-r1 up to 21.1.12-r0
21.1.12-r0
xorg-server
Alpaquita:stream
 21.1.4-r1 up to 21.1.12-r0
21.1.12-r0
Show 45 moreShow less
Affected packages
PackageAffectedFixed
xorg-server
Debian:12
 before 2:21.1.7-3+deb12u7, plus listed versions
2:21.1.7-32:21.1.7-3+deb12u12:21.1.7-3+deb12u22:21.1.7-3+deb12u32:21.1.7-3+deb12u42:21.1.7-3+deb12u52:21.1.7-3+deb12u6
2:21.1.7-3+deb12u7
xorg-server
Debian:13
 before 2:21.1.11-3
2:21.1.11-3
xorg-server
Debian:14
 before 2:21.1.11-3
2:21.1.11-3
xorg-x11-server
openEuler:20.03-LTS-SP1
From an advisory covering 4 CVEs
 before 1.20.8-24.oe1
1.20.8-24.oe1
xorg-x11-server
openEuler:20.03-LTS-SP4
From an advisory covering 4 CVEs
 before 1.20.8-26.oe2003sp4
1.20.8-26.oe2003sp4
xorg-x11-server
openEuler:22.03-LTS
From an advisory covering 4 CVEs
 before 1.20.11-29.oe2203sp3
1.20.11-29.oe2203sp3
xorg-x11-server
openEuler:22.03-LTS-SP1
From an advisory covering 4 CVEs
 before 1.20.11-29.oe2203sp1
1.20.11-29.oe2203sp1
xorg-x11-server
openEuler:22.03-LTS-SP2
From an advisory covering 4 CVEs
 before 1.20.11-29.oe2203sp2
1.20.11-29.oe2203sp2
xorg-x11-server
openEuler:22.03-LTS-SP3
From an advisory covering 4 CVEs
 before 1.20.11-29.oe2203sp3
1.20.11-29.oe2203sp3
xorg-x11-server
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 4 CVEs
 before 1.19.6-10.71.1
1.19.6-10.71.1
xorg-x11-server
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 1.19.6-10.71.1
1.19.6-10.71.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 1.19.6-10.71.1
1.19.6-10.71.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 1.20.3-150400.38.48.1
1.20.3-150400.38.48.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 1.20.3-150400.38.48.1
1.20.3-150400.38.48.1
xorg-x11-server
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 1.20.3-150400.38.48.1
1.20.3-150400.38.48.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 1.20.3-150400.38.48.1
1.20.3-150400.38.48.1
xorg-x11-server
SUSE:Manager Proxy 4.3
From an advisory covering 4 CVEs
 before 1.20.3-150400.38.48.1
1.20.3-150400.38.48.1
xorg-x11-server
SUSE:Manager Server 4.3
From an advisory covering 4 CVEs
 before 1.20.3-150400.38.48.1
1.20.3-150400.38.48.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 4 CVEs
 before 1.20.3-150200.22.5.96.1
1.20.3-150200.22.5.96.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 1.20.3-150200.22.5.96.1
1.20.3-150200.22.5.96.1
xorg-x11-server
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 4 CVEs
 before 1.20.3-150200.22.5.96.1
1.20.3-150200.22.5.96.1
xorg-x11-server
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 1.20.3-150200.22.5.96.1
1.20.3-150200.22.5.96.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 4 CVEs
 before 1.20.3-150200.22.5.96.1
1.20.3-150200.22.5.96.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 4 CVEs
 before 1.20.3-150200.22.5.96.1
1.20.3-150200.22.5.96.1
xorg-x11-server
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 4 CVEs
 before 1.20.3-150200.22.5.96.1
1.20.3-150200.22.5.96.1
xorg-x11-server
SUSE:Enterprise Storage 7.1
From an advisory covering 4 CVEs
 before 1.20.3-150200.22.5.96.1
1.20.3-150200.22.5.96.1
xorg-x11-server
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 4 CVEs
 before 21.1.4-150500.7.26.1
21.1.4-150500.7.26.1
xorg-x11-server
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 4 CVEs
 before 21.1.4-150500.7.26.1
21.1.4-150500.7.26.1
xorg-x11-server
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 21.1.4-150500.7.26.1
21.1.4-150500.7.26.1
xorg-server
Ubuntu:Pro:14.04:LTS
 before 2:1.15.1-0ubuntu2.11+esm11, plus listed versions
2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1
Show 28 moreShow less
2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.42:1.15.1-0ubuntu2.52:1.15.1-0ubuntu2.62:1.15.1-0ubuntu2.72:1.15.1-0ubuntu2.92:1.15.1-0ubuntu2.102:1.15.1-0ubuntu2.112:1.15.1-0ubuntu2.11+esm22:1.15.1-0ubuntu2.11+esm32:1.15.1-0ubuntu2.11+esm42:1.15.1-0ubuntu2.11+esm52:1.15.1-0ubuntu2.11+esm62:1.15.1-0ubuntu2.11+esm72:1.15.1-0ubuntu2.11+esm82:1.15.1-0ubuntu2.11+esm9
2:1.15.1-0ubuntu2.11+esm11
xorg-server
Ubuntu:Pro:16.04:LTS
 before 2:1.18.4-0ubuntu0.12+esm12, plus listed versions
2:1.17.2-1ubuntu92:1.17.2-1ubuntu102:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu3
Show 26 moreShow less
2:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu22:1.18.3-1ubuntu2.22:1.18.3-1ubuntu2.32:1.18.4-0ubuntu0.12:1.18.4-0ubuntu0.22:1.18.4-0ubuntu0.32:1.18.4-0ubuntu0.42:1.18.4-0ubuntu0.62:1.18.4-0ubuntu0.72:1.18.4-0ubuntu0.82:1.18.4-0ubuntu0.92:1.18.4-0ubuntu0.102:1.18.4-0ubuntu0.112:1.18.4-0ubuntu0.122:1.18.4-0ubuntu0.12+esm12:1.18.4-0ubuntu0.12+esm22:1.18.4-0ubuntu0.12+esm42:1.18.4-0ubuntu0.12+esm52:1.18.4-0ubuntu0.12+esm62:1.18.4-0ubuntu0.12+esm82:1.18.4-0ubuntu0.12+esm92:1.18.4-0ubuntu0.12+esm10
2:1.18.4-0ubuntu0.12+esm12
xorg-server-hwe-16.04
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:1.18.4-1ubuntu6.1~16.04.12:1.18.4-1ubuntu6.1~16.04.22:1.19.3-1ubuntu1~16.04.22:1.19.3-1ubuntu1~16.04.32:1.19.3-1ubuntu1~16.04.4
Show 17 moreShow less
2:1.19.5-0ubuntu2~16.04.12:1.19.6-1ubuntu4~16.04.12:1.19.6-1ubuntu4.1~16.04.12:1.19.6-1ubuntu4.1~16.04.22:1.19.6-1ubuntu4.1~16.04.32:1.19.6-1ubuntu4.1~16.04.42:1.19.6-1ubuntu4.1~16.04.52:1.19.6-1ubuntu4.1~16.04.62:1.19.6-1ubuntu4.1~16.04.6+esm12:1.19.6-1ubuntu4.1~16.04.6+esm32:1.19.6-1ubuntu4.1~16.04.6+esm42:1.19.6-1ubuntu4.1~16.04.6+esm52:1.19.6-1ubuntu4.1~16.04.6+esm62:1.19.6-1ubuntu4.1~16.04.6+esm72:1.19.6-1ubuntu4.1~16.04.6+esm82:1.19.6-1ubuntu4.1~16.04.6+esm92:1.19.6-1ubuntu4.1~16.04.6+esm10
 None known
xorg-server
Ubuntu:Pro:18.04:LTS
 before 2:1.19.6-1ubuntu4.15+esm7, plus listed versions
2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu4
Show 19 moreShow less
2:1.19.6-1ubuntu4.12:1.19.6-1ubuntu4.22:1.19.6-1ubuntu4.32:1.19.6-1ubuntu4.42:1.19.6-1ubuntu4.52:1.19.6-1ubuntu4.62:1.19.6-1ubuntu4.72:1.19.6-1ubuntu4.82:1.19.6-1ubuntu4.92:1.19.6-1ubuntu4.102:1.19.6-1ubuntu4.112:1.19.6-1ubuntu4.122:1.19.6-1ubuntu4.132:1.19.6-1ubuntu4.142:1.19.6-1ubuntu4.152:1.19.6-1ubuntu4.15+esm12:1.19.6-1ubuntu4.15+esm32:1.19.6-1ubuntu4.15+esm42:1.19.6-1ubuntu4.15+esm5
2:1.19.6-1ubuntu4.15+esm7
xorg-server-hwe-18.04
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:1.20.1-3ubuntu2.1~18.04.12:1.20.4-1ubuntu3~18.04.12:1.20.5+git20191008-0ubuntu1~18.04.12:1.20.8-2ubuntu2.1~18.04.12:1.20.8-2ubuntu2.2~18.04.1
Show 15 moreShow less
2:1.20.8-2ubuntu2.2~18.04.22:1.20.8-2ubuntu2.2~18.04.32:1.20.8-2ubuntu2.2~18.04.42:1.20.8-2ubuntu2.2~18.04.52:1.20.8-2ubuntu2.2~18.04.62:1.20.8-2ubuntu2.2~18.04.72:1.20.8-2ubuntu2.2~18.04.82:1.20.8-2ubuntu2.2~18.04.92:1.20.8-2ubuntu2.2~18.04.102:1.20.8-2ubuntu2.2~18.04.112:1.20.8-2ubuntu2.2~18.04.11+esm12:1.20.8-2ubuntu2.2~18.04.11+esm22:1.20.8-2ubuntu2.2~18.04.11+esm32:1.20.8-2ubuntu2.2~18.04.11+esm42:1.20.8-2ubuntu2.2~18.04.11+esm5
 None known
xorg-server
Ubuntu:20.04:LTS
 before 2:1.20.13-1ubuntu1~20.04.16, plus listed versions
2:1.20.5+git20191008-0ubuntu12:1.20.6-1ubuntu12:1.20.7-2ubuntu12:1.20.7-2ubuntu22:1.20.8-2ubuntu2
Show 19 moreShow less
2:1.20.8-2ubuntu2.12:1.20.8-2ubuntu2.22:1.20.8-2ubuntu2.32:1.20.8-2ubuntu2.42:1.20.8-2ubuntu2.62:1.20.9-2ubuntu1.1~20.04.12:1.20.9-2ubuntu1.2~20.04.12:1.20.9-2ubuntu1.2~20.04.22:1.20.11-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.42:1.20.13-1ubuntu1~20.04.52:1.20.13-1ubuntu1~20.04.62:1.20.13-1ubuntu1~20.04.82:1.20.13-1ubuntu1~20.04.92:1.20.13-1ubuntu1~20.04.122:1.20.13-1ubuntu1~20.04.142:1.20.13-1ubuntu1~20.04.15
2:1.20.13-1ubuntu1~20.04.16
xorg-server
Ubuntu:22.04:LTS
 before 2:21.1.4-2ubuntu1.7~22.04.9, plus listed versions
2:1.20.13-1ubuntu12:1.20.13-1ubuntu22:1.20.14-1ubuntu12:21.1.3-2ubuntu22:21.1.3-2ubuntu2.1
Show 13 moreShow less
2:21.1.3-2ubuntu2.22:21.1.3-2ubuntu2.32:21.1.3-2ubuntu2.42:21.1.3-2ubuntu2.52:21.1.3-2ubuntu2.62:21.1.3-2ubuntu2.72:21.1.3-2ubuntu2.82:21.1.3-2ubuntu2.92:21.1.4-2ubuntu1.7~22.04.12:21.1.4-2ubuntu1.7~22.04.22:21.1.4-2ubuntu1.7~22.04.52:21.1.4-2ubuntu1.7~22.04.72:21.1.4-2ubuntu1.7~22.04.8
2:21.1.4-2ubuntu1.7~22.04.9
xwayland
Ubuntu:22.04:LTS
 before 2:22.1.1-1ubuntu0.12, plus listed versions
2:21.1.2-0ubuntu12:21.1.3-12:21.1.3-1ubuntu12:21.1.4-12:22.1.0-1
Show 11 moreShow less
2:22.1.1-12:22.1.1-1ubuntu0.12:22.1.1-1ubuntu0.22:22.1.1-1ubuntu0.32:22.1.1-1ubuntu0.42:22.1.1-1ubuntu0.52:22.1.1-1ubuntu0.62:22.1.1-1ubuntu0.72:22.1.1-1ubuntu0.92:22.1.1-1ubuntu0.102:22.1.1-1ubuntu0.11
2:22.1.1-1ubuntu0.12
xorg-server
Ubuntu:24.04:LTS
 before 2:21.1.12-1ubuntu1, plus listed versions
2:21.1.7-3ubuntu22:21.1.7-3ubuntu2.12:21.1.10-1ubuntu12:21.1.11-2ubuntu1
2:21.1.12-1ubuntu1
xorg-server
Ubuntu:Pro:14.04:LTS
From an advisory covering 4 CVEs
 before 2:1.15.1-0ubuntu2.11+esm11, plus listed versions
2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1
Show 28 moreShow less
2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.42:1.15.1-0ubuntu2.52:1.15.1-0ubuntu2.62:1.15.1-0ubuntu2.72:1.15.1-0ubuntu2.92:1.15.1-0ubuntu2.102:1.15.1-0ubuntu2.112:1.15.1-0ubuntu2.11+esm22:1.15.1-0ubuntu2.11+esm32:1.15.1-0ubuntu2.11+esm42:1.15.1-0ubuntu2.11+esm52:1.15.1-0ubuntu2.11+esm62:1.15.1-0ubuntu2.11+esm72:1.15.1-0ubuntu2.11+esm82:1.15.1-0ubuntu2.11+esm9
2:1.15.1-0ubuntu2.11+esm11
xorg-server
Ubuntu:Pro:16.04:LTS
From an advisory covering 4 CVEs
 before 2:1.18.4-0ubuntu0.12+esm12, plus listed versions
2:1.17.2-1ubuntu92:1.17.2-1ubuntu102:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu3
Show 26 moreShow less
2:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu22:1.18.3-1ubuntu2.22:1.18.3-1ubuntu2.32:1.18.4-0ubuntu0.12:1.18.4-0ubuntu0.22:1.18.4-0ubuntu0.32:1.18.4-0ubuntu0.42:1.18.4-0ubuntu0.62:1.18.4-0ubuntu0.72:1.18.4-0ubuntu0.82:1.18.4-0ubuntu0.92:1.18.4-0ubuntu0.102:1.18.4-0ubuntu0.112:1.18.4-0ubuntu0.122:1.18.4-0ubuntu0.12+esm12:1.18.4-0ubuntu0.12+esm22:1.18.4-0ubuntu0.12+esm42:1.18.4-0ubuntu0.12+esm52:1.18.4-0ubuntu0.12+esm62:1.18.4-0ubuntu0.12+esm82:1.18.4-0ubuntu0.12+esm92:1.18.4-0ubuntu0.12+esm10
2:1.18.4-0ubuntu0.12+esm12
xorg-server
Ubuntu:Pro:18.04:LTS
From an advisory covering 4 CVEs
 before 2:1.19.6-1ubuntu4.15+esm7, plus listed versions
2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu4
Show 19 moreShow less
2:1.19.6-1ubuntu4.12:1.19.6-1ubuntu4.22:1.19.6-1ubuntu4.32:1.19.6-1ubuntu4.42:1.19.6-1ubuntu4.52:1.19.6-1ubuntu4.62:1.19.6-1ubuntu4.72:1.19.6-1ubuntu4.82:1.19.6-1ubuntu4.92:1.19.6-1ubuntu4.102:1.19.6-1ubuntu4.112:1.19.6-1ubuntu4.122:1.19.6-1ubuntu4.132:1.19.6-1ubuntu4.142:1.19.6-1ubuntu4.152:1.19.6-1ubuntu4.15+esm12:1.19.6-1ubuntu4.15+esm32:1.19.6-1ubuntu4.15+esm42:1.19.6-1ubuntu4.15+esm5
2:1.19.6-1ubuntu4.15+esm7
xorg-server
Ubuntu:20.04:LTS
From an advisory covering 4 CVEs
 before 2:1.20.13-1ubuntu1~20.04.16, plus listed versions
2:1.20.5+git20191008-0ubuntu12:1.20.6-1ubuntu12:1.20.7-2ubuntu12:1.20.7-2ubuntu22:1.20.8-2ubuntu2
Show 19 moreShow less
2:1.20.8-2ubuntu2.12:1.20.8-2ubuntu2.22:1.20.8-2ubuntu2.32:1.20.8-2ubuntu2.42:1.20.8-2ubuntu2.62:1.20.9-2ubuntu1.1~20.04.12:1.20.9-2ubuntu1.2~20.04.12:1.20.9-2ubuntu1.2~20.04.22:1.20.11-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.42:1.20.13-1ubuntu1~20.04.52:1.20.13-1ubuntu1~20.04.62:1.20.13-1ubuntu1~20.04.82:1.20.13-1ubuntu1~20.04.92:1.20.13-1ubuntu1~20.04.122:1.20.13-1ubuntu1~20.04.142:1.20.13-1ubuntu1~20.04.15
2:1.20.13-1ubuntu1~20.04.16
xorg-server
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 2:21.1.4-2ubuntu1.7~22.04.9, plus listed versions
2:1.20.13-1ubuntu12:1.20.13-1ubuntu22:1.20.14-1ubuntu12:21.1.3-2ubuntu22:21.1.3-2ubuntu2.1
Show 13 moreShow less
2:21.1.3-2ubuntu2.22:21.1.3-2ubuntu2.32:21.1.3-2ubuntu2.42:21.1.3-2ubuntu2.52:21.1.3-2ubuntu2.62:21.1.3-2ubuntu2.72:21.1.3-2ubuntu2.82:21.1.3-2ubuntu2.92:21.1.4-2ubuntu1.7~22.04.12:21.1.4-2ubuntu1.7~22.04.22:21.1.4-2ubuntu1.7~22.04.52:21.1.4-2ubuntu1.7~22.04.72:21.1.4-2ubuntu1.7~22.04.8
2:21.1.4-2ubuntu1.7~22.04.9
xwayland
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 2:22.1.1-1ubuntu0.12, plus listed versions
2:21.1.2-0ubuntu12:21.1.3-12:21.1.3-1ubuntu12:21.1.4-12:22.1.0-1
Show 11 moreShow less
2:22.1.1-12:22.1.1-1ubuntu0.12:22.1.1-1ubuntu0.22:22.1.1-1ubuntu0.32:22.1.1-1ubuntu0.42:22.1.1-1ubuntu0.52:22.1.1-1ubuntu0.62:22.1.1-1ubuntu0.72:22.1.1-1ubuntu0.92:22.1.1-1ubuntu0.102:22.1.1-1ubuntu0.11
2:22.1.1-1ubuntu0.12
xorg-x11-server
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 21.1.12-1.1
21.1.12-1.1

History

History
RecordedChangedSources
affectedEUVD, NVD, OSV
factsCVE List
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-31082 is a high vulnerability (CVSS 7.3) in Red Hat Enterprise Linux 10, published March 4, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in xorg-server 21.1.12-r0.

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open