Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 0.5%top 60%

Red Hat Security Advisory: xorg-x11-server security update

0
Medium
Published: 05/22/2024 (05/22/2024, 11:45:11 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Multiple security vulnerabilities have been identified in the xorg-x11-server component of Red Hat Enterprise Linux 8. These include heap buffer overread and data leakage issues in ProcXIGetSelectedEvents (CVE-2024-31080) and ProcXIPassiveGrabDevice (CVE-2024-31081), as well as a use-after-free vulnerability in ProcRenderAddGlyphs (CVE-2024-31083). Red Hat has released security updates to address these moderate-impact issues.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 06/25/2026, 22:49:52 UTC

Technical Analysis

Red Hat Product Security has issued an advisory (RHSA-2024:3258) for xorg-x11-server in Red Hat Enterprise Linux 8 addressing three vulnerabilities: two heap buffer overread/data leakage issues (CVE-2024-31080 and CVE-2024-31081) and one use-after-free vulnerability (CVE-2024-31083). These vulnerabilities affect the X.Org implementation of the X Window System, which provides foundational graphical interface functionality. The advisory rates the security impact as moderate and provides updated packages to remediate these issues.

Potential Impact

The vulnerabilities could lead to heap buffer overread and data leakage or use-after-free conditions within the xorg-x11-server, potentially exposing sensitive information or causing instability in graphical interface operations. The advisory classifies the impact as moderate, indicating a security risk that should be addressed but is not critical or high severity.

Mitigation Recommendations

Red Hat has released updated xorg-x11-server packages for Red Hat Enterprise Linux 8 that fix these vulnerabilities. Users should apply the security update as described in Red Hat's advisory RHSA-2024:3258 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2024:3258
Cve Count
3
Additional Cves
["CVE-2024-31081","CVE-2024-31083"]
Cvss Version
null

Threat ID: 6a3da1f74853345fc1834c42

Added to database: 06/25/2026, 21:47:35 UTC

Last enriched: 06/25/2026, 22:49:52 UTC

Last updated: 07/02/2026, 20:51:13 UTC

Views: 5

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses