{"bugs":[""],"codename":null,"cvss3":7.5,"description":"\nfreeglut 3.4.0 was discovered to contain a memory leak via the menuEntry\nvariable in the glutAddSubMenu function.","id":"CVE-2024-24258","impact":{"baseMetricV3":{"cvssV3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}},"mitigation":"","notes":[{"author":"shishirsub10","note":"freeglut is a dependency of mupdf and rebuilding mupdf after\nUSN-7888-1 fixed the issue in mupdf."}],"notices":[{"cves_ids":["CVE-2024-24258","CVE-2024-24259"],"description":"It was discovered that Freeglut incorrectly managed memory, resulting in a\nmemory leak. An attacker could possibly use this issue to cause a denial of\nservice.","id":"USN-7870-1","instructions":"In general, a standard system update will make all the necessary changes.","is_hidden":false,"published":"2025-11-17T04:29:53.124127","references":[],"release_packages":{"bionic":[{"description":"Free implementation of the OpenGL Utility Toolkit (GLUT)","is_source":true,"name":"freeglut","version":"2.8.1-3ubuntu0.18.04.1~esm1"},{"is_source":false,"is_visible":true,"name":"freeglut3","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-3ubuntu0.18.04.1~esm1","version_link":null},{"is_source":false,"is_visible":true,"name":"freeglut3-dev","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-3ubuntu0.18.04.1~esm1","version_link":null}],"focal":[{"description":"Free implementation of the OpenGL Utility Toolkit (GLUT)","is_source":true,"name":"freeglut","version":"2.8.1-3ubuntu0.20.04.1~esm1"},{"is_source":false,"is_visible":true,"name":"freeglut3","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-3ubuntu0.20.04.1~esm1","version_link":null},{"is_source":false,"is_visible":true,"name":"freeglut3-dev","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-3ubuntu0.20.04.1~esm1","version_link":null}],"jammy":[{"description":"Free implementation of the OpenGL Utility Toolkit (GLUT)","is_source":true,"name":"freeglut","version":"2.8.1-6ubuntu0.1~esm1"},{"is_source":false,"is_visible":true,"name":"freeglut3","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-6ubuntu0.1~esm1","version_link":null},{"is_source":false,"is_visible":false,"name":"freeglut3-dev","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-6ubuntu0.1~esm1","version_link":null}],"noble":[{"description":"Free implementation of the OpenGL Utility Toolkit (GLUT)","is_source":true,"name":"freeglut","version":"3.4.0-1ubuntu0.1~esm1"},{"is_source":false,"is_visible":false,"name":"freeglut3-dev","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-1ubuntu0.1~esm1","version_link":null},{"is_source":false,"is_visible":true,"name":"libglut-dev","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-1ubuntu0.1~esm1","version_link":null},{"is_source":false,"is_visible":true,"name":"libglut3.12","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-1ubuntu0.1~esm1","version_link":null}],"plucky":[{"description":"Free implementation of the OpenGL Utility Toolkit (GLUT)","is_source":true,"name":"freeglut","version":"3.4.0-4ubuntu0.1"},{"is_source":false,"is_visible":false,"name":"freeglut3-dev","pocket":"security","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-4ubuntu0.1","version_link":"https://launchpad.net/ubuntu/+source/freeglut/3.4.0-4ubuntu0.1"},{"is_source":false,"is_visible":true,"name":"libglut-dev","pocket":"security","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-4ubuntu0.1","version_link":"https://launchpad.net/ubuntu/+source/freeglut/3.4.0-4ubuntu0.1"},{"is_source":false,"is_visible":true,"name":"libglut3.12","pocket":"security","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-4ubuntu0.1","version_link":"https://launchpad.net/ubuntu/+source/freeglut/3.4.0-4ubuntu0.1"}],"questing":[{"description":"Free implementation of the OpenGL Utility Toolkit (GLUT)","is_source":true,"name":"freeglut","version":"3.4.0-5ubuntu0.1"},{"is_source":false,"is_visible":false,"name":"freeglut3-dev","pocket":"security","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-5ubuntu0.1","version_link":"https://launchpad.net/ubuntu/+source/freeglut/3.4.0-5ubuntu0.1"},{"is_source":false,"is_visible":true,"name":"libglut-dev","pocket":"security","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-5ubuntu0.1","version_link":"https://launchpad.net/ubuntu/+source/freeglut/3.4.0-5ubuntu0.1"},{"is_source":false,"is_visible":true,"name":"libglut3.12","pocket":"security","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"3.4.0-5ubuntu0.1","version_link":"https://launchpad.net/ubuntu/+source/freeglut/3.4.0-5ubuntu0.1"}],"trusty":[{"description":"Free implementation of the OpenGL Utility Toolkit (GLUT)","is_source":true,"name":"freeglut","version":"2.8.1-1ubuntu0.1~esm1"},{"is_source":false,"is_visible":true,"name":"freeglut3","pocket":"esm-infra-legacy","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-1ubuntu0.1~esm1","version_link":null},{"is_source":false,"is_visible":false,"name":"freeglut3-dev","pocket":"esm-infra-legacy","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-1ubuntu0.1~esm1","version_link":null}],"xenial":[{"description":"Free implementation of the OpenGL Utility Toolkit (GLUT)","is_source":true,"name":"freeglut","version":"2.8.1-2ubuntu0.1~esm1"},{"is_source":false,"is_visible":true,"name":"freeglut3","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-2ubuntu0.1~esm1","version_link":null},{"is_source":false,"is_visible":false,"name":"freeglut3-dev","pocket":"esm-apps","source_link":"https://launchpad.net/ubuntu/+source/freeglut","version":"2.8.1-2ubuntu0.1~esm1","version_link":null}]},"summary":"Several security issues were fixed in Freeglut.","title":"Freeglut vulnerabilities","type":"USN"}],"notices_ids":["USN-7870-1"],"packages":[{"debian":"https://tracker.debian.org/pkg/mupdf","name":"mupdf","source":"https://ubuntu.com/security/cve?package=mupdf","statuses":[{"component":null,"description":"end of life, was needs-triage","pocket":"security","release_codename":"questing","status":"ignored"},{"component":null,"description":"","pocket":"security","release_codename":"xenial","status":"needs-triage"},{"component":null,"description":"end of standard support","pocket":"security","release_codename":"trusty","status":"ignored"},{"component":null,"description":"","pocket":"security","release_codename":"upstream","status":"needs-triage"},{"component":null,"description":"end of life, was needs-triage","pocket":"security","release_codename":"mantic","status":"ignored"},{"component":null,"description":"1.12.0+ds1-1ubuntu0.1~esm2","pocket":"esm-apps","release_codename":"bionic","status":"released"},{"component":null,"description":"1.16.1+ds1-1ubuntu1+esm2","pocket":"esm-apps","release_codename":"focal","status":"released"},{"component":null,"description":"1.19.0+ds1-2ubuntu0.1~esm1","pocket":"esm-apps","release_codename":"jammy","status":"released"},{"component":null,"description":"1.23.10+ds1-1ubuntu0.1~esm1","pocket":"esm-apps","release_codename":"noble","status":"released"},{"component":null,"description":"","pocket":"security","release_codename":"resolute","status":"needs-triage"},{"component":null,"description":"end of life, was needs-triage","pocket":"security","release_codename":"plucky","status":"ignored"},{"component":null,"description":"end of life, was needs-triage","pocket":"security","release_codename":"oracular","status":"ignored"}],"ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mupdf"},{"debian":"https://tracker.debian.org/pkg/freeglut","name":"freeglut","source":"https://ubuntu.com/security/cve?package=freeglut","statuses":[{"component":null,"description":"","pocket":"security","release_codename":"resolute","status":"needs-triage"},{"component":null,"description":"2.8.1-1ubuntu0.1~esm1","pocket":"esm-infra-legacy","release_codename":"trusty","status":"released"},{"component":null,"description":"2.8.1-2ubuntu0.1~esm1","pocket":"esm-apps","release_codename":"xenial","status":"released"},{"component":null,"description":"2.8.1-3ubuntu0.18.04.1~esm1","pocket":"esm-apps","release_codename":"bionic","status":"released"},{"component":null,"description":"2.8.1-3ubuntu0.20.04.1~esm1","pocket":"esm-apps","release_codename":"focal","status":"released"},{"component":null,"description":"2.8.1-6ubuntu0.1~esm1","pocket":"esm-apps","release_codename":"jammy","status":"released"},{"component":null,"description":"3.4.0-1ubuntu0.1~esm1","pocket":"esm-apps","release_codename":"noble","status":"released"},{"component":null,"description":"3.4.0-4ubuntu0.1","pocket":"security","release_codename":"plucky","status":"released"},{"component":null,"description":"3.4.0-5ubuntu0.1","pocket":"security","release_codename":"questing","status":"released"},{"component":null,"description":"","pocket":"security","release_codename":"upstream","status":"needs-triage"}],"ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeglut"}],"patches":{"freeglut":[],"mupdf":[]},"priority":"medium","published":"2024-02-05T18:15:00","references":["https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_1.md","https://www.cve.org/CVERecord?id=CVE-2024-24258","https://github.com/freeglut/freeglut/pull/155","https://ubuntu.com/security/notices/USN-7870-1"],"status":"active","tags":{},"ubuntu_description":"","updated_at":"2026-03-24T05:13:53.228539+00:00"}