A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xdmx | May 15, 2023 | Dec 14, 2022 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 22, 2024 | Dec 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-devel | May 28, 2024 | Dec 14, 2022 |
| Amazon_linux | — | Upgrade xorg-x11-server | Feb 23, 2023 | Dec 14, 2022 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debugsource | Feb 17, 2025 | Dec 14, 2022 |
| Centos_linux | — | Upgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervncUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-module | Jan 12, 2023 | Dec 14, 2022 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Dec 22, 2022 | Dec 14, 2022 |
| Freebsd | — | Upgrade xwayland-develUpgrade xwaylandUpgrade xephyrUpgrade xorg-vfbserverUpgrade xorg-serverUpgrade xorg-nestserver | Jan 13, 2023 | Jan 11, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | May 31, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Mar 20, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | May 8, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Jun 9, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Feb 9, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 10, 2023 | Dec 14, 2022 |
| Oracle_linux | — | Upgrade tigervnc-selinuxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-license | Jan 10, 2023 | Dec 14, 2022 |
| Redhat_linux | — | Upgrade tigervncUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XdmxUpgrade tigervnc-licenseUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-debuginfoNo solution existsUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debuginfo | Jan 12, 2023 | Dec 14, 2022 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-serverUpgrade xwayland-develUpgrade xorg-x11-server-sdkUpgrade xwaylandUpgrade xorg-x11-server-source | Dec 15, 2022 | Dec 14, 2022 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwaylandUpgrade xwayland-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro) | Dec 15, 2022 | Dec 14, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub