A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland | May 15, 2023 | Dec 14, 2022 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 22, 2024 | Dec 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb | May 28, 2024 | Dec 14, 2022 |
| Amazon_linux | — | Upgrade xorg-x11-server | Feb 23, 2023 | Dec 14, 2022 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfo | Feb 17, 2025 | Dec 14, 2022 |
| Centos_linux | — | Upgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-source | Jan 12, 2023 | Dec 14, 2022 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Dec 22, 2022 | Dec 14, 2022 |
| Freebsd | — | Upgrade xorg-serverUpgrade xorg-vfbserverUpgrade xephyrUpgrade xorg-nestserverUpgrade xwaylandUpgrade xwayland-devel | Jan 13, 2023 | Jan 11, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | May 31, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Mar 20, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | May 8, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Jun 9, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Feb 9, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 10, 2023 | Dec 14, 2022 |
| Oracle_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-source | Jan 10, 2023 | Dec 14, 2022 |
| Redhat_linux | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-debugsourceUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XephyrUpgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XdmxUpgrade tigervnc-licenseNo solution exists | Jan 12, 2023 | Dec 14, 2022 |
| Suse | — | Upgrade xwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-serverUpgrade xwayland-develUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-wayland | Dec 15, 2022 | Dec 14, 2022 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xwayland (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro) | Dec 15, 2022 | Dec 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub