8.8
High
CVE-2022-46343 A vulnerability was found in X.Org
Description
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| xorg-x11-server | Versions not published |
References
- access.redhat.com access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2022-c3a65f7c65 lists.fedoraproject.org
- FEDORA-2022-721a78b7e5 lists.fedoraproject.org
- DSA-5304 www.debian.org
- FEDORA-2022-dd3eb7e0a8 lists.fedoraproject.org
- security.gentoo.org security.gentoo.org
Timeline
- Published
- Last modified