Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-5574
HistoryOct 25, 2023 - 8:15 p.m.

Double free

2023-10-2520:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerable application
use-after-free
xvfb server
specific configuration
zaphod mode
privilege escalation
denial of service

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.1%

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.

CPENameOperatorVersion
enterprise_linuxeq7.0
x_serverge1.13.0