A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade tigervnc-licenseUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade tigervncUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx | Feb 13, 2023 | Feb 8, 2023 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 22, 2024 | Mar 27, 2023 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-iconsUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade tigervnc-serverUpgrade tigervnc | Mar 7, 2023 | Mar 7, 2023 |
| Amazon_linux | — | Upgrade tigervncUpgrade xorg-x11-server | Mar 23, 2023 | Feb 7, 2023 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfo | Feb 17, 2025 | Feb 7, 2023 |
| Centos_linux | — | Upgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfo | Feb 8, 2023 | Feb 7, 2023 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Feb 8, 2023 | Feb 8, 2023 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xwayland-develUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xwayland | Feb 9, 2023 | Feb 8, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | May 31, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 12, 2024 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade tigervnc-selinux | Feb 8, 2023 | Feb 7, 2023 |
| Redhat_linux | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-develNo solution existsUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade tigervnc-debugsource | Feb 8, 2023 | Feb 7, 2023 |
| Rocky_linux | — | Upgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade tigervnc-server-module-debuginfo | Mar 12, 2024 | Mar 27, 2023 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xwaylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-extraUpgrade xwayland-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-serverUpgrade xorg-x11-server-source | Feb 8, 2023 | Feb 7, 2023 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core-hwe-18.04Upgrade xwayland-hwe-18.04Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core | Mar 22, 2023 | Feb 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub