A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade tigervnc-selinuxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server | Apr 6, 2023 | Mar 30, 2023 |
| Centos_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-applet | Apr 6, 2023 | Mar 30, 2023 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Mar 31, 2023 | Mar 31, 2023 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-nestserverUpgrade xorg-vfbserver | Mar 31, 2023 | Mar 29, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | May 31, 2023 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 13, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jan 10, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 17, 2024 | Mar 30, 2023 |
| Oracle_linux | — | Upgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade tigervnc-server | Apr 5, 2023 | Mar 29, 2023 |
| Redhat_linux | — | Upgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debugsourceNo solution existsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinux | Apr 6, 2023 | Mar 30, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 30, 2023 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvfb | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwaylandUpgrade xwayland-hwe-18.04Upgrade xserver-xorg-core-hwe-18.04 | Apr 10, 2023 | Mar 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub