Lucene search
FreeBSD96D84238-B500-490B-B6AA-2B77090A0410HistoryMar 29, 2023 - 12:00 a.m.
xorg-server -- Overlay Window Use-After-Free
2023-03-2900:00:00
vuxml.freebsd.org
16
x.org project reports
zdi-can-19866
cve-2023-1393
local privilege escalation
vulnerability
compositor overlay window
compscreen structure
use-after-free
unix
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
16.1%
The X.Org project reports:
ZDI-CAN-19866/CVE-2023-1393: X.Org Server Overlay Window Use-After-Free
Local Privilege Escalation Vulnerability
If a client explicitly destroys the compositor overlay window (aka COW),
the Xserver would leave a dangling pointer to that window in the CompScreen
structure, which will trigger a use-after-free later.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | xorg-server | < 21.1.8,1 | UNKNOWN |
| FreeBSD | any | noarch | xephyr | < 21.1.8,1 | UNKNOWN |
| FreeBSD | any | noarch | xorg-vfbserver | < 21.1.8,1 | UNKNOWN |
| FreeBSD | any | noarch | xorg-nestserver | < 21.1.8,2 | UNKNOWN |
| FreeBSD | any | noarch | xwayland | = 23.0.0,1 | UNKNOWN |
| FreeBSD | any | noarch | xwayland | < 23.1.1,1 | UNKNOWN |
| FreeBSD | any | noarch | xwayland-devel | < 21.0.99.1.439 | UNKNOWN |
Related
nessus
nessus
CentOS 8 : tigervnc (CESA-2023:1551)
2024-02-08 00:00:00
Fedora 37 : xorg-x11-server (2023-7d7c74b868)
2023-03-29 00:00:00
osv
osv
xorg-server, xorg-server-hwe-18.04, xwayland vulnerability
2023-03-29 18:12:56
xorg-server - security update
2023-03-29 00:00:00
CVE-2023-1393
2023-03-30 21:15:06
openvas
openvas
Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-7d7c74b868)
2023-03-31 00:00:00
Fedora: Security Advisory for tigervnc (FEDORA-2023-66d5af0278)
2023-04-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:1677-1)
2023-03-30 00:00:00
mageia
mageia
Updated tigervnc/x11-server packages fix security vulnerability
2023-04-11 22:02:20
redhat
redhat
(RHSA-2023:1551) Important: tigervnc security update
2023-04-04 06:28:11
(RHSA-2023:1594) Important: tigervnc and xorg-x11-server security update
2023-04-04 09:16:07
(RHSA-2023:1599) Important: tigervnc security update
2023-04-04 09:17:56
fedora
fedora
[SECURITY] Fedora 36 Update: xorg-x11-server-Xwayland-22.1.9-1.fc36
2023-04-14 01:31:42
[SECURITY] Fedora 37 Update: xorg-x11-server-1.20.14-21.fc37
2023-03-30 01:22:57
[SECURITY] Fedora 37 Update: tigervnc-1.13.1-3.fc37
2023-04-03 01:36:10
redos
redos
ROS-20230419-03
2023-04-19 00:00:00
oraclelinux
oraclelinux
xorg-x11-server security and bug fix update
2023-11-17 00:00:00
tigervnc security update
2023-04-04 00:00:00
xorg-x11-server-Xwayland security, bug fix, and enhancement update
2023-11-11 00:00:00
almalinux
almalinux
Moderate: xorg-x11-server security and bug fix update
2023-11-07 00:00:00
Important: tigervnc security update
2023-04-04 00:00:00
Important: tigervnc security update
2023-04-04 00:00:00
debiancve
debiancve
CVE-2023-1393
2023-03-30 21:15:06
veracode
veracode
Privilege Escalation
2023-04-05 21:05:12
ubuntucve
ubuntucve
CVE-2023-1393
2023-03-29 00:00:00
zdi
zdi
prion
prion
Design/Logic Flaw
2023-03-30 21:15:00
cbl_mariner
cbl_mariner
redhatcve
redhatcve
CVE-2023-1393
2023-03-30 09:13:48
ubuntu
ubuntu
X.Org X Server vulnerability
2023-03-29 00:00:00
slackware
slackware
[slackware-security] xorg-server
2023-03-29 21:04:01
[slackware-security] tigervnc
2023-11-13 19:27:10
debian
debian
[SECURITY] [DSA 5380-1] xorg-server security update
2023-03-29 12:59:00
[SECURITY] [DLA 3372-1] xorg-server security update
2023-03-29 14:32:35
altlinux
altlinux
Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt8
2023-04-05 00:00:00
alpinelinux
alpinelinux
CVE-2023-1393
2023-03-30 21:15:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2154
2023-04-18 11:49:06
Advisory ROSA-SA-2023-2153
2023-04-18 11:48:32
nvd
nvd
CVE-2023-1393
2023-03-30 21:15:06
cve
cve
CVE-2023-1393
2023-03-30 21:15:06
rocky
rocky
tigervnc security update
2023-04-06 15:24:04
cvelist
cvelist
CVE-2023-1393
2023-03-30 00:00:00
gentoo
gentoo
X.Org X server, XWayland: Multiple Vulnerabilities
2023-05-30 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
16.1%
Related for 96D84238-B500-490B-B6AA-2B77090A0410