Description
Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | xfree86 | 4.1.0-16woody3 | DSA-443 |
Advisories 1
- DSA-443 xfree86 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-443 vendor-advisory
- 9701 vdb-entry
- RHSA-2004:152 vendor-advisory
- xfree86-glx-integer-dos(15273) vdb-entry
- CLSA-2004:824 vendor-advisory