DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
X.Org X11: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Advisory ansehen veröffentlicht 2022-12-13
Ein lokaler oder entfernter, authentisierter Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um seine Privilegien zu erhöhen und Code auszuführen.
01
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-46283US | — | — | ||
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | ||||
| CVE-2022-4283US | high7.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on… | ||||
| CVE-2022-46344US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory… | ||||
| CVE-2022-46343US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue c… | ||||
| CVE-2022-46342US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can… | ||||
| CVE-2022-46341US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or… | ||||
| CVE-2022-46340US | high8.8 | — | ||
A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2023-0045 vom 2023-01-09external
- Oracle Linux Security Advisory ELSA-2023-0046 vom 2023-01-09external
- Changes for Xming version 7.7.0.86 vom 2022-12-24external
- Red Hat Security Advisory RHSA-2023:0045 vom 2023-01-09external
- Red Hat Security Advisory RHSA-2023:0046 vom 2023-01-09external
- Red Hat Security Advisory RHSA-2023:2248 vom 2023-05-09external
- Red Hat Security Advisory RHSA-2023:2249 vom 2023-05-09external
- Red Hat Security Advisory RHSA-2023:2257 vom 2023-05-09external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan