Lucene search
Ubuntu.comUB:CVE-2023-0494HistoryFeb 07, 2023 - 12:00 a.m.
CVE-2023-0494
2023-02-0700:00:00
ubuntu.com
ubuntu.com
11
0.001 Low
EPSS
Percentile
49.3%
A vulnerability was found in X.Org. This issue occurs due to a dangling
pointer in DeepCopyPointerClasses that can be exploited by
ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into
freed memory. This can lead to local privilege elevation on systems where
the X server runs privileged and remote code execution for ssh X forwarding
sessions.
Notes
| Author | Note |
|---|---|
| mdeslaur | xorg server is actually the xorg-server package the xorg package only contains docs xwayland package contains parts of xorg-server |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | xorg-server | < 2:1.19.6-1ubuntu4.14 | UNKNOWN |
| ubuntu | 20.04 | noarch | xorg-server | < 2:1.20.13-1ubuntu1~20.04.6 | UNKNOWN |
| ubuntu | 22.04 | noarch | xorg-server | < 2:21.1.3-2ubuntu2.7 | UNKNOWN |
| ubuntu | 22.10 | noarch | xorg-server | < 2:21.1.4-2ubuntu1.5 | UNKNOWN |
| ubuntu | 23.04 | noarch | xorg-server | < 2:21.1.7-1ubuntu1 | UNKNOWN |
| ubuntu | 14.04 | noarch | xorg-server | < 2:1.15.1-0ubuntu2.11+esm7) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 16.04 | noarch | xorg-server | < 2:1.18.4-0ubuntu0.12+esm5) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 16.04 | noarch | xorg-server-hwe-16.04 | < 2:1.19.6-1ubuntu4.1~16.04.6+esm4) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 18.04 | noarch | xorg-server-hwe-18.04 | < 2:1.20.8-2ubuntu2.2~18.04.10 | UNKNOWN |
| ubuntu | 22.04 | noarch | xwayland | < 2:22.1.1-1ubuntu0.5 | UNKNOWN |
Related
nessus
nessus
EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2023-1989)
2023-05-17 00:00:00
SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2023:0282-1)
2023-02-08 00:00:00
Debian DSA-5342-1 : xorg-server - security update
2023-02-07 00:00:00
freebsd
freebsd
xorg-server -- Security issue in the X server
2023-02-07 00:00:00
rocky
rocky
tigervnc security update
2023-02-16 06:35:13
tigervnc security update
2023-02-16 06:36:03
redhatcve
redhatcve
CVE-2023-0494
2023-02-07 04:26:37
redhat
redhat
(RHSA-2023:0622) Important: tigervnc security update
2023-02-07 15:17:04
(RHSA-2023:0675) Important: tigervnc and xorg-x11-server security update
2023-02-08 19:38:55
(RHSA-2023:0671) Important: tigervnc security update
2023-02-08 15:24:29
alpinelinux
alpinelinux
CVE-2023-0494
2023-03-27 21:15:10
openvas
openvas
CentOS: Security Advisory for xorg-x11-server-common (CESA-2023:0675)
2023-03-07 00:00:00
CentOS: Security Advisory for tigervnc (CESA-2023:0675)
2023-02-21 00:00:00
Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-fb5022e741)
2023-02-23 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: xorg-x11-server-Xwayland-22.1.8-1.fc37
2023-02-12 00:44:45
[SECURITY] Fedora 37 Update: tigervnc-1.13.0-1.fc37
2023-02-13 00:45:02
[SECURITY] Fedora 36 Update: xorg-x11-server-Xwayland-22.1.8-1.fc36
2023-02-22 11:09:02
debian
debian
[SECURITY] [DSA 5342-1] xorg-server security update
2023-02-07 15:48:26
[SECURITY] [DLA 3310-1] xorg-server security update
2023-02-07 07:30:28
veracode
veracode
Use After Free
2023-02-11 05:09:41
altlinux
altlinux
Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt7
2023-02-15 00:00:00
amazon
amazon
Important: xorg-x11-server
2023-03-02 22:35:00
Important: xorg-x11-server
2023-03-17 15:53:00
Important: tigervnc
2023-05-11 18:00:00
osv
osv
CVE-2023-0494
2023-03-27 21:15:10
Important: tigervnc security update
2023-02-16 06:35:13
Important: tigervnc security update
2023-02-16 06:36:03
centos
centos
tigervnc, xorg security update
2023-02-20 16:16:26
oraclelinux
oraclelinux
tigervnc security update
2023-02-08 00:00:00
tigervnc security update
2023-02-08 00:00:00
tigervnc and xorg-x11-server security update
2023-02-09 00:00:00
debiancve
debiancve
CVE-2023-0494
2023-03-27 21:15:10
rosalinux
rosalinux
Advisory ROSA-SA-2023-2126
2023-02-28 10:19:45
Advisory ROSA-SA-2023-2125
2023-02-28 10:13:13
cve
cve
CVE-2023-0494
2023-03-27 21:15:10
prion
prion
Design/Logic Flaw
2023-03-27 21:15:00
redos
redos
ROS-20230210-02
2023-02-10 00:00:00
zdi
zdi
ubuntu
ubuntu
X.Org X Server vulnerability
2023-02-07 00:00:00
X.Org X Server vulnerabilities
2023-02-16 00:00:00
almalinux
almalinux
Important: tigervnc security update
2023-02-07 00:00:00
Important: tigervnc security update
2023-02-08 00:00:00
Moderate: xorg-x11-server security and bug fix update
2023-05-09 00:00:00
slackware
slackware
[slackware-security] xorg-server
2023-02-07 20:58:17
[slackware-security] tigervnc
2023-11-13 19:27:10
mageia
mageia
Updated tigervnc/x11-server packages fix security vulnerability
2023-03-31 03:13:46
cvelist
cvelist
CVE-2023-0494
2023-03-27 00:00:00
gentoo
gentoo
X.Org X server, XWayland: Multiple Vulnerabilities
2023-05-30 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00