A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimal | May 15, 2023 | Dec 14, 2022 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 22, 2024 | Dec 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb | May 28, 2024 | Dec 14, 2022 |
| Amazon_linux | — | Upgrade xorg-x11-server | Feb 23, 2023 | Dec 14, 2022 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfo | Feb 17, 2025 | Dec 14, 2022 |
| Centos_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg | Jan 12, 2023 | Dec 14, 2022 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Dec 22, 2022 | Dec 14, 2022 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xwayland-develUpgrade xorg-nestserverUpgrade xwaylandUpgrade xorg-vfbserver | Jan 13, 2023 | Jan 11, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | May 31, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Mar 20, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | May 8, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Jun 9, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Feb 9, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 10, 2023 | Dec 14, 2022 |
| Oracle_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade tigervnc-license | Jan 10, 2023 | Dec 14, 2022 |
| Redhat_linux | — | Upgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-module-debuginfoUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XnestNo solution existsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinuxUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-Xvfb | Jan 12, 2023 | Dec 14, 2022 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extraUpgrade xwayland-develUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xwaylandUpgrade xorg-x11-server-source | Dec 15, 2022 | Dec 14, 2022 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 | Dec 15, 2022 | Dec 14, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub