跳转到帖子

Amazon Linux AMI 2: CVE-2024-31083: Security patch for tigervnc, xorg-x11-server (Multiple Advisories)

recommended_posts

发布于
  • Members

Amazon Linux AMI 2: CVE-2024-31083: Security patch for tigervnc, xorg-x11-server (Multiple Advisories)

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
04/05/2024
Created
04/19/2024
Added
04/19/2024
Modified
04/19/2024

Description

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.

Solution(s)

  • amazon-linux-ami-2-upgrade-tigervnc
  • amazon-linux-ami-2-upgrade-tigervnc-debuginfo
  • amazon-linux-ami-2-upgrade-tigervnc-icons
  • amazon-linux-ami-2-upgrade-tigervnc-license
  • amazon-linux-ami-2-upgrade-tigervnc-server
  • amazon-linux-ami-2-upgrade-tigervnc-server-applet
  • amazon-linux-ami-2-upgrade-tigervnc-server-minimal
  • amazon-linux-ami-2-upgrade-tigervnc-server-module
  • amazon-linux-ami-2-upgrade-xorg-x11-server-common
  • amazon-linux-ami-2-upgrade-xorg-x11-server-debuginfo
  • amazon-linux-ami-2-upgrade-xorg-x11-server-devel
  • amazon-linux-ami-2-upgrade-xorg-x11-server-source
  • amazon-linux-ami-2-upgrade-xorg-x11-server-xdmx
  • amazon-linux-ami-2-upgrade-xorg-x11-server-xephyr
  • amazon-linux-ami-2-upgrade-xorg-x11-server-xnest
  • amazon-linux-ami-2-upgrade-xorg-x11-server-xorg
  • amazon-linux-ami-2-upgrade-xorg-x11-server-xvfb
  • amazon-linux-ami-2-upgrade-xorg-x11-server-xwayland

References

  • https://attackerkb.com/topics/cve-2024-31083
  • AL2/ALAS-2024-2510
  • AL2/ALAS-2024-2511
  • CVE - 2024-31083
  • 查看数 707
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。
注意:你的帖子需要版主批准后才能看到。

游客
回帖…