CVE-2022-46340

2022-12-1400:00:00

ubuntu.com

0.02 Low

EPSS

Percentile

88.7%

JSON

A vulnerability was found in X.Org. This security flaw occurs becuase the
swap handler for the XTestFakeInput request of the XTest extension may
corrupt the stack if GenericEvents with lengths larger than 32 bytes are
sent through a the XTestFakeInput request. This issue can lead to local
privileges elevation on systems where the X server is running privileged
and remote code execution for ssh X forwarding sessions. This issue does
not affect systems where client and server use the same byte order.

Notes

Author	Note
mdeslaur	xorg server is actually the xorg-server package the xorg package only contains docs xwayland package contains parts of xorg-server This is ZDI-CAN-19265

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchxorg-server< 2:1.19.6-1ubuntu4.13UNKNOWN
ubuntu20.04noarchxorg-server< 2:1.20.13-1ubuntu1~20.04.5UNKNOWN
ubuntu22.04noarchxorg-server< 2:21.1.3-2ubuntu2.5UNKNOWN
ubuntu22.10noarchxorg-server< 2:21.1.4-2ubuntu1.3UNKNOWN
ubuntu23.04noarchxorg-server< 2:21.1.5-1ubuntu1UNKNOWN
ubuntu14.04noarchxorg-server< 2:1.15.1-0ubuntu2.11+esm7) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchxorg-server< 2:1.18.4-0ubuntu0.12+esm5) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchxorg-server-hwe-16.04< 2:1.19.6-1ubuntu4.1~16.04.6+esm4) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchxorg-server-hwe-18.04< 2:1.20.8-2ubuntu2.2~18.04.9UNKNOWN
ubuntu22.04noarchxwayland< 2:22.1.1-1ubuntu0.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	xorg-server	< 2:1.19.6-1ubuntu4.13	UNKNOWN
ubuntu	20.04	noarch	xorg-server	< 2:1.20.13-1ubuntu1~20.04.5	UNKNOWN
ubuntu	22.04	noarch	xorg-server	< 2:21.1.3-2ubuntu2.5	UNKNOWN
ubuntu	22.10	noarch	xorg-server	< 2:21.1.4-2ubuntu1.3	UNKNOWN
ubuntu	23.04	noarch	xorg-server	< 2:21.1.5-1ubuntu1	UNKNOWN
ubuntu	14.04	noarch	xorg-server	< 2:1.15.1-0ubuntu2.11+esm7) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	xorg-server	< 2:1.18.4-0ubuntu0.12+esm5) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	xorg-server-hwe-16.04	< 2:1.19.6-1ubuntu4.1~16.04.6+esm4) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	18.04	noarch	xorg-server-hwe-18.04	< 2:1.20.8-2ubuntu2.2~18.04.9	UNKNOWN
ubuntu	22.04	noarch	xwayland	< 2:22.1.1-1ubuntu0.4	UNKNOWN