A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade tigervncUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-sourceUpgrade tigervnc-icons | May 15, 2023 | Dec 14, 2022 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 22, 2024 | Dec 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfo | May 28, 2024 | Dec 14, 2022 |
| Amazon_linux | — | Upgrade xorg-x11-server | Feb 23, 2023 | Dec 14, 2022 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xnest-debuginfo | Feb 17, 2025 | Dec 14, 2022 |
| Centos_linux | — | Upgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xorg | Jan 12, 2023 | Dec 14, 2022 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Dec 22, 2022 | Dec 14, 2022 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xwayland-develUpgrade xwaylandUpgrade xephyrUpgrade xorg-server | Jan 13, 2023 | Jan 11, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | May 31, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Mar 20, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | May 8, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Jun 9, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Feb 9, 2023 | Dec 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 10, 2023 | Dec 14, 2022 |
| Oracle_linux | — | Upgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr | Jan 10, 2023 | Dec 14, 2022 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandNo solution existsUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XvfbUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-debuginfo | Jan 12, 2023 | Dec 14, 2022 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xwayland-devel | Dec 15, 2022 | Dec 14, 2022 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland-hwe-18.04Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwaylandUpgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 | Dec 15, 2022 | Dec 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub