Not rated
CVE-2022-2320 A flaw was found in the Xorg-x11-server
Description
A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to escalate privileges and execute arbitrary code in the context of root.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| xorg-x11-server | Versions not published |
References
- gitlab.freedesktop.org gitlab.freedesktop.org
- gitlab.freedesktop.org gitlab.freedesktop.org
- github.com github.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- lists.freedesktop.org lists.freedesktop.org
- GLSA-202210-30 security.gentoo.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified