A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade tigervnc-selinuxUpgrade tigervnc | Apr 6, 2023 | Mar 30, 2023 |
| Centos_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade tigervnc | Apr 6, 2023 | Mar 30, 2023 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Mar 31, 2023 | Mar 31, 2023 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xwayland-develUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xwayland | Mar 31, 2023 | Mar 29, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | May 31, 2023 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 13, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jan 10, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 17, 2024 | Mar 30, 2023 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server | Apr 5, 2023 | Mar 29, 2023 |
| Redhat_linux | — | Upgrade tigervnc-serverUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-debugsourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestNo solution existsUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-icons | Apr 6, 2023 | Mar 30, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 30, 2023 |
| Suse | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xwayland-develUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-wayland | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwaylandUpgrade xserver-xorg-core-hwe-18.04Upgrade xwayland-hwe-18.04 | Apr 10, 2023 | Mar 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub