A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-develUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade tigervnc-selinuxUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimal | Apr 6, 2023 | Mar 30, 2023 |
| Centos_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-devel | Apr 6, 2023 | Mar 30, 2023 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Mar 31, 2023 | Mar 31, 2023 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xwayland-develUpgrade xorg-nestserverUpgrade xorg-vfbserverUpgrade xwayland | Mar 31, 2023 | Mar 29, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | May 31, 2023 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 13, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jan 10, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 17, 2024 | Mar 30, 2023 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade tigervnc-server | Apr 5, 2023 | Mar 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-server-appletUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-icons | Apr 6, 2023 | Mar 30, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 30, 2023 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xwayland-develUpgrade xorg-x11-serverUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-wayland | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04Upgrade xwayland-hwe-18.04 | Apr 10, 2023 | Mar 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub