A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade tigervnc-selinuxUpgrade tigervncUpgrade tigervnc-serverUpgrade xorg-x11-server-devel | Apr 6, 2023 | Mar 30, 2023 |
| Centos_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade tigervncUpgrade tigervnc-licenseUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-common | Apr 6, 2023 | Mar 30, 2023 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Mar 31, 2023 | Mar 31, 2023 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-nestserverUpgrade xorg-serverUpgrade xephyr | Mar 31, 2023 | Mar 29, 2023 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | May 31, 2023 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | May 13, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jan 10, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 13, 2024 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jul 17, 2024 | Mar 30, 2023 |
| Oracle_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade xorg-x11-server-Xwayland | Apr 5, 2023 | Mar 29, 2023 |
| Redhat_linux | — | Upgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-moduleNo solution existsUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsource | Apr 6, 2023 | Mar 30, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 30, 2023 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xwaylandUpgrade xorg-x11-server-sourceUpgrade xwayland-develUpgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extra | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xwayland-hwe-18.04Upgrade xserver-xorg-coreUpgrade xwayland | Apr 10, 2023 | Mar 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub