CVE-2022-4283

2022-12-1400:00:00

ubuntu.com

x.org

memory access vulnerability

local privilege escalation

remote code execution

x server

x forwarding sessions

xkbcopynames

xkbgetkbdbyname

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

65.0%

JSON

A vulnerability was found in X.Org. This security flaw occurs because the
XkbCopyNames function left a dangling pointer to freed memory, resulting in
out-of-bounds memory access on subsequent XkbGetKbdByName requests… This
issue can lead to local privileges elevation on systems where the X server
is running privileged and remote code execution for ssh X forwarding
sessions.

Notes

Author	Note
mdeslaur	xorg server is actually the xorg-server package the xorg package only contains docs xwayland package contains parts of xorg-server This is ZDI-CAN-19530

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchxorg-server< 2:1.19.6-1ubuntu4.13UNKNOWN
ubuntu20.04noarchxorg-server< 2:1.20.13-1ubuntu1~20.04.5UNKNOWN
ubuntu22.04noarchxorg-server< 2:21.1.3-2ubuntu2.5UNKNOWN
ubuntu22.10noarchxorg-server< 2:21.1.4-2ubuntu1.3UNKNOWN
ubuntu23.04noarchxorg-server< 2:21.1.5-1ubuntu1UNKNOWN
ubuntu14.04noarchxorg-server< 2:1.15.1-0ubuntu2.11+esm7UNKNOWN
ubuntu16.04noarchxorg-server< 2:1.18.4-0ubuntu0.12+esm5UNKNOWN
ubuntu16.04noarchxorg-server-hwe-16.04< 2:1.19.6-1ubuntu4.1~16.04.6+esm4UNKNOWN
ubuntu18.04noarchxorg-server-hwe-18.04< 2:1.20.8-2ubuntu2.2~18.04.9UNKNOWN
ubuntu22.04noarchxwayland< 2:22.1.1-1ubuntu0.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	xorg-server	< 2:1.19.6-1ubuntu4.13	UNKNOWN
ubuntu	20.04	noarch	xorg-server	< 2:1.20.13-1ubuntu1~20.04.5	UNKNOWN
ubuntu	22.04	noarch	xorg-server	< 2:21.1.3-2ubuntu2.5	UNKNOWN
ubuntu	22.10	noarch	xorg-server	< 2:21.1.4-2ubuntu1.3	UNKNOWN
ubuntu	23.04	noarch	xorg-server	< 2:21.1.5-1ubuntu1	UNKNOWN
ubuntu	14.04	noarch	xorg-server	< 2:1.15.1-0ubuntu2.11+esm7	UNKNOWN
ubuntu	16.04	noarch	xorg-server	< 2:1.18.4-0ubuntu0.12+esm5	UNKNOWN
ubuntu	16.04	noarch	xorg-server-hwe-16.04	< 2:1.19.6-1ubuntu4.1~16.04.6+esm4	UNKNOWN
ubuntu	18.04	noarch	xorg-server-hwe-18.04	< 2:1.20.8-2ubuntu2.2~18.04.9	UNKNOWN
ubuntu	22.04	noarch	xwayland	< 2:22.1.1-1ubuntu0.4	UNKNOWN