A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade tigervnc-server | Feb 13, 2023 | Feb 8, 2023 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 22, 2024 | Mar 27, 2023 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade tigervncUpgrade xorg-x11-server-Xwayland | Mar 7, 2023 | Mar 7, 2023 |
| Amazon_linux | — | Upgrade xorg-x11-serverUpgrade tigervnc | Mar 23, 2023 | Feb 7, 2023 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-devel | Feb 17, 2025 | Feb 7, 2023 |
| Centos_linux | — | Upgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfo | Feb 8, 2023 | Feb 7, 2023 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Feb 8, 2023 | Feb 8, 2023 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland-develUpgrade xephyrUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xwayland | Feb 9, 2023 | Feb 8, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | May 31, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 12, 2024 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade tigervncUpgrade tigervnc-selinuxUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc-icons | Feb 8, 2023 | Feb 7, 2023 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-selinuxUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xorg | Feb 8, 2023 | Feb 7, 2023 |
| Rocky_linux | — | Upgrade tigervnc-server-debuginfoUpgrade tigervnc-serverUpgrade tigervncUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-server-module-debuginfo | Mar 12, 2024 | Mar 27, 2023 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xwayland-develUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-wayland | Feb 8, 2023 | Feb 7, 2023 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xwaylandUpgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core | Mar 22, 2023 | Feb 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub