CVE-2022-46344

2022-12-1400:00:00

redhat

www.cve.org

x.org

vulnerability

information disclosure

local privileges elevation

remote code execution

x forwarding sessions

8.9 High

AI Score

Confidence

High

0.033 Low

EPSS

Percentile

91.4%

JSON

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "xorg-x11-server",
    "versions": [
      {
        "version": "xorg-x11-server-1.20.4",
        "status": "affected"
      }
    ]
  }
]