Lucene search

K

PRIOn knowledge basePRION:CVE-2022-4283

HistoryDec 14, 2022 - 9:15 p.m.

Out-of-bounds

2022-12-1421:15:00

PRIOn knowledge base

www.prio-n.com

8

x.org

vulnerability

memory access

local privileges elevation

remote code execution

ssh x forwarding sessions

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.1%

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests… This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

CPENameOperatorVersion
debian_linuxeq11.0
fedoraeq36
fedoraeq37
enterprise_linuxeq7.0
enterprise_linuxeq6.0
enterprise_linuxeq8.0
enterprise_linuxeq9.0
xorg-servereq1.20.4

References

access.redhat.com/security/cve/CVE-2022-4283

bugzilla.redhat.com/show_bug.cgi?id=2151761

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/

security.gentoo.org/glsa/202305-30

www.debian.org/security/2022/dsa-5304

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.1%

Related for PRION:CVE-2022-4283

debiancve1 nvd1 redhatcve1 veracode1 cvelist1 zdi1 cve1 alpinelinux1 ubuntucve1 osv11 nessus61 oraclelinux8 mageia1 redhat8 openvas31 centos2 almalinux6 ubuntu2 slackware2 freebsd1 debian2 fedora4 rosalinux2 amazon2 gentoo1