CVE-2022-4283
High
Description
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
SeverityHigh
CVSS7.8
Exploit probability—
Product
X.org X Server
PublishedDec 14, 2022
First seenDec 14, 2022
Weakness typeCWE-416Use after free
How to fix
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/
- debian.org/security/2022/dsa-5304
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x.org x_server | 1.20.4 | — |
| fedoraproject fedora | 36, 37 | — |
| redhat enterprise_linux | 6.0, 7.0, 8.0, 9.0 | — |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.