CVE-2022-4283

CWE-416 — Use After Free8 documents7 sources
Severity
7.8HIGH
EPSS
0.2%
top 60.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Debian Debian LinuxFedoraproject FedoraRedhat Enterprise Linux+1 more
Timeline
PublishedDec 14
Latest updateFeb 16

Description

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶Debianxorg-server< 2:1.20.11-1+deb11u4+3
▶NVDx.org/x_server1.20.4
▶CVEListV5xorg-x11-serverxorg-x11-server-1.20.4
▶Debianxwayland< 2:22.1.6-1+2

Also affects: Debian Linux 11.0, Fedora 36, 37, Enterprise Linux 6.0, 7.0, 8.0, 9.0

🔴Vulnerability Details

3
GHSA
GHSA-pchh-rhx4-655j: A vulnerability was found in X↗2022-12-14
▶
OSV
CVE-2022-4283: A vulnerability was found in X↗2022-12-14
▶
CVEList
CVE-2022-4283: A vulnerability was found in X↗2022-12-14
▶

📋Vendor Advisories

4
Ubuntu
X.Org X Server vulnerabilities↗2023-02-16
▶
Red Hat
xorg-x11-server: XkbGetKbdByName use-after-free↗2022-12-14
▶
Ubuntu
X.Org X Server vulnerabilities↗2022-12-14
▶
Debian
CVE-2022-4283: xorg-server - A vulnerability was found in X.Org. This security flaw occurs because the XkbCop...↗2022
▶
CVE-2022-4283 (HIGH CVSS 7.8) | A vulnerability was found in X.Org | cvebase.io