ALPINE-CVE-2024-31080
- Source
- https://security.alpinelinux.org/vuln/CVE-2024-31080
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-31080.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALPINE-CVE-2024-31080
- Upstream
- Published
- 2024-04-04T14:15:10Z
- Modified
- 2026-11-03T06:32:59Z
- Severity
-
- 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
- References