Lucene search
HistoryMar 27, 2023 - 9:15 p.m.
CVE-2023-0494
x.org
vulnerability
local privilege elevation
remote code execution
procxkbsetdeviceinfo
procxkbgetdeviceinfo
memory
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.8%
A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.
Affected configurations
Node
x.orgx_serverRange<21.1.7
Node
fedoraprojectfedoraMatch36
ORfedoraprojectfedoraMatch37
Node
redhatenterprise_linuxMatch8.0
ORredhatenterprise_linuxMatch8.1
ORredhatenterprise_linuxMatch9.0
ORredhatenterprise_linux_ausMatch8.4
ORredhatenterprise_linux_ausMatch8.6
ORredhatenterprise_linux_desktopMatch7.0
ORredhatenterprise_linux_eusMatch8.4
ORredhatenterprise_linux_eusMatch8.6
ORredhatenterprise_linux_eusMatch9.0
ORredhatenterprise_linux_for_ibm_z_systemsMatch7.0
ORredhatenterprise_linux_for_ibm_z_systemsMatch8.0
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.4
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.6
ORredhatenterprise_linux_for_power_big_endianMatch7.0
ORredhatenterprise_linux_for_power_little_endianMatch7.0
ORredhatenterprise_linux_for_power_little_endianMatch8.0
ORredhatenterprise_linux_for_power_little_endianMatch9.0
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.4
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.6
ORredhatenterprise_linux_for_scientific_computingMatch7.0
ORredhatenterprise_linux_serverMatch7.0
ORredhatenterprise_linux_server_ausMatch8.2
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.1
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.2
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.4
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.6
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch9.0
ORredhatenterprise_linux_server_tusMatch8.2
ORredhatenterprise_linux_server_tusMatch8.4
ORredhatenterprise_linux_server_tusMatch8.6
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.2
ORredhatenterprise_linux_server_workstationMatch7.0
Related
redhatcve
redhatcve
CVE-2023-0494
2023-02-07 04:26:37
redhat
redhat
(RHSA-2023:0622) Important: tigervnc security update
2023-02-07 15:17:04
(RHSA-2023:0675) Important: tigervnc and xorg-x11-server security update
2023-02-08 19:38:55
(RHSA-2023:0671) Important: tigervnc security update
2023-02-08 15:24:29
debian
debian
[SECURITY] [DSA 5342-1] xorg-server security update
2023-02-07 15:48:26
[SECURITY] [DLA 3310-1] xorg-server security update
2023-02-07 07:27:41
nessus
nessus
Debian DSA-5342-1 : xorg-server - security update
2023-02-07 00:00:00
SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2023:0282-1)
2023-02-08 00:00:00
freebsd
freebsd
xorg-server -- Security issue in the X server
2023-02-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: xorg-x11-server-Xwayland-22.1.8-1.fc37
2023-02-12 00:44:45
[SECURITY] Fedora 37 Update: tigervnc-1.13.0-1.fc37
2023-02-13 00:45:02
[SECURITY] Fedora 37 Update: xorg-x11-server-1.20.14-18.fc37
2023-02-13 00:45:00
rocky
rocky
tigervnc security update
2023-02-16 06:35:13
tigervnc security update
2023-02-16 06:36:03
veracode
veracode
Use After Free
2023-02-11 05:09:41
alpinelinux
alpinelinux
CVE-2023-0494
2023-03-27 21:15:10
openvas
openvas
Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-fb5022e741)
2023-02-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0286-1)
2023-02-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0287-1)
2023-02-08 00:00:00
centos
centos
tigervnc, xorg security update
2023-02-20 16:16:26
amazon
amazon
Important: tigervnc
2024-05-23 22:04:00
Important: xorg-x11-server
2023-03-02 22:35:00
Important: xorg-x11-server
2023-03-17 15:53:00
altlinux
altlinux
Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt7
2023-02-15 00:00:00
osv
osv
CVE-2023-0494
2023-03-27 21:15:10
Important: tigervnc security update
2023-02-16 06:35:13
Important: tigervnc security update
2023-02-16 06:36:03
ubuntu
ubuntu
X.Org X Server vulnerability
2023-02-07 00:00:00
X.Org X Server vulnerabilities
2023-02-16 00:00:00
slackware
slackware
[slackware-security] xorg-server
2023-02-07 20:58:17
[slackware-security] tigervnc
2023-11-13 19:27:10
almalinux
almalinux
Important: tigervnc security update
2023-02-08 00:00:00
Important: tigervnc security update
2023-02-07 00:00:00
Moderate: xorg-x11-server-Xwayland security update
2023-05-09 00:00:00
zdi
zdi
mageia
mageia
Updated tigervnc/x11-server packages fix security vulnerability
2023-03-31 03:13:46
redos
redos
ROS-20230210-02
2023-02-10 00:00:00
prion
prion
Design/Logic Flaw
2023-03-27 21:15:00
cvelist
cvelist
CVE-2023-0494
2023-03-27 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2126
2023-02-28 10:19:45
Advisory ROSA-SA-2023-2125
2023-02-28 10:13:13
cve
cve
CVE-2023-0494
2023-03-27 21:15:10
debiancve
debiancve
CVE-2023-0494
2023-03-27 21:15:10
ubuntucve
ubuntucve
CVE-2023-0494
2023-02-07 00:00:00
oraclelinux
oraclelinux
tigervnc security update
2023-02-08 00:00:00
tigervnc security update
2023-02-08 00:00:00
tigervnc and xorg-x11-server security update
2023-02-09 00:00:00
gentoo
gentoo
X.Org X server, XWayland: Multiple Vulnerabilities
2023-05-30 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.8%
Related for NVD:CVE-2023-0494