Gentoo FoundationMGASA-2023-0012Updated x11-server packages fix security vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.036 Low
EPSS
Percentile
91.7%
X.Org Server XkbGetKbdByName use-after-free. (CVE-2022-4283) X.Org Server XTestSwapFakeInput stack overflow. (CVE-2022-46340) X.Org Server XIPassiveUngrab out-of-bounds access. (CVE-2022-46341) X.Org Server XvdiSelectVideoNotify use-after-free. (CVE-2022-46342) X.Org Server ScreenSaverSetAttributes use-after-free. (CVE-2022-46343) X.Org Server XIChangeProperty out-of-bounds access. (CVE-2022-46344)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | x11-server | < 1.20.14-4.1 | x11-server-1.20.14-4.1.mga8 |
References
bugs.mageia.org/show_bug.cgi?id=31281
lists.fedoraproject.org/archives/list/[email protected]/thread/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/
lists.fedoraproject.org/archives/list/[email protected]/thread/RWTH3SNJ3GKYDSN7I3QDGWYEPSMWU6EP/
lists.x.org/archives/xorg-announce/2022-December/003302.html
ubuntu.com/security/notices/USN-5778-1
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.036 Low
EPSS
Percentile
91.7%