Skip to content
Sign in
7.8 High

CVE-2023-0494 A vulnerability was found in X.Org

Description

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.

Affected products and versions

Product Affected versions Fixed in
xorg-x11-server Versions not published

Other CVEs of xorg-x11-server

The 21 CVEs of xorg-x11-server →
CVE-2022-46343 A vulnerability was found in X.Org 8.8 High CVE-2022-46344 A vulnerability was found in X.Org Not rated CVE-2022-4283 A vulnerability was found in X.Org 7.8 High CVE-2022-46342 A vulnerability was found in X.Org 8.8 High
Track this CVE