8.8
High
CVE-2022-46340 A vulnerability was found in X.Org
Description
A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| xorg-x11-server | Versions not published |
References
- access.redhat.com access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2022-c3a65f7c65 lists.fedoraproject.org
- FEDORA-2022-721a78b7e5 lists.fedoraproject.org
- DSA-5304 www.debian.org
- FEDORA-2022-3d88188071 lists.fedoraproject.org
- FEDORA-2022-dd3eb7e0a8 lists.fedoraproject.org
- security.gentoo.org security.gentoo.org
Timeline
- Published
- Last modified