A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XdmxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade tigervncUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-moduleUpgrade tigervnc-icons | Feb 13, 2023 | Feb 8, 2023 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 22, 2024 | Mar 27, 2023 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade tigervnc-server | Mar 7, 2023 | Mar 7, 2023 |
| Amazon_linux | — | Upgrade xorg-x11-serverUpgrade tigervnc | Mar 23, 2023 | Feb 7, 2023 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfo | Feb 17, 2025 | Feb 7, 2023 |
| Centos_linux | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server | Feb 8, 2023 | Feb 7, 2023 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Feb 8, 2023 | Feb 8, 2023 |
| Freebsd | — | Upgrade xephyrUpgrade xwayland-develUpgrade xorg-serverUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xwayland | Feb 9, 2023 | Feb 8, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | May 31, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 12, 2024 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-appletUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland | Feb 8, 2023 | Feb 7, 2023 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-appletNo solution existsUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-sourceUpgrade tigervnc-serverUpgrade tigervnc-server-debuginfo | Feb 8, 2023 | Feb 7, 2023 |
| Rocky_linux | — | Upgrade tigervnc-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade tigervncUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-debuginfo | Mar 12, 2024 | Mar 27, 2023 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-XvfbUpgrade xwayland-develUpgrade xorg-x11-server-wayland | Feb 8, 2023 | Feb 7, 2023 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04Upgrade xwaylandUpgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro) | Mar 22, 2023 | Feb 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub