Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38591
HistoryDec 24, 2022 - 7:43 a.m.

Remote Code Execution (RCE)

2022-12-2407:43:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
xorg-server
rce
vulnerability
xipassiveungrab
out-of-bounds
memory access

0.036 Low

EPSS

Percentile

91.7%

xorg-server is vulnerable to remote code execution. The vulnerability exists because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code.

References