DeutschShown in its original language — a full translation is planned for a future version.
X.Org X11: Mehrere Schwachstellen ermöglichen Privilegieneskalation
view advisory published 2022-12-13
Ein lokaler oder entfernter, authentisierter Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um seine Privilegien zu erhöhen und Code auszuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-46283US | — | — | ||
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | ||||
| CVE-2022-4283US | high7.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on… | ||||
| CVE-2022-46344US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory… | ||||
| CVE-2022-46343US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue c… | ||||
| CVE-2022-46342US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can… | ||||
| CVE-2022-46341US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or… | ||||
| CVE-2022-46340US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2023-0045 vom 2023-01-09external
- Oracle Linux Security Advisory ELSA-2023-0046 vom 2023-01-09external
- Changes for Xming version 7.7.0.86 vom 2022-12-24external
- Red Hat Security Advisory RHSA-2023:0045 vom 2023-01-09external
- Red Hat Security Advisory RHSA-2023:0046 vom 2023-01-09external
- Red Hat Security Advisory RHSA-2023:2248 vom 2023-05-09external
- Red Hat Security Advisory RHSA-2023:2249 vom 2023-05-09external
- Red Hat Security Advisory RHSA-2023:2257 vom 2023-05-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan