Lucene search

Veracode Vulnerability DatabaseVERACODE:40049

HistoryApr 05, 2023 - 9:05 p.m.

Privilege Escalation

2023-04-0521:05:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

xwayland

vulnerability

privilege escalation

use-after-free

local

software security

0.0004 Low

EPSS

Percentile

16.1%

JSON

xwayland is vulnerable to Privilege Escalation. When a client explicitly destroys the compositor overlay window, the server would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free resulting in local privilege escalation.

CPENameOperatorVersion
xwayland:develeq2:1.20.10-3ubuntu3
xwayland:develeq2:1.20.8-2ubuntu4
xwayland:develeq2:1.20.9-2ubuntu1
xwayland:develeq2:1.20.8-2ubuntu6
xwayland:sideq2:1.20.8-2
xwayland:sideq2:1.20.11-1
xwayland:bookwormeq2:1.20.11-1
xorg-x11-servereq1.13.0__11.el6
xorg-x11-servereq1.17.4__9.el6
xorg-x11-servereq1.15.0__25.1.el6_6

Name	Operator	Version
xwayland:devel	eq	2:1.20.10-3ubuntu3
xwayland:devel	eq	2:1.20.8-2ubuntu4
xwayland:devel	eq	2:1.20.9-2ubuntu1
xwayland:devel	eq	2:1.20.8-2ubuntu6
xwayland:sid	eq	2:1.20.8-2
xwayland:sid	eq	2:1.20.11-1
xwayland:bookworm	eq	2:1.20.11-1
xorg-x11-server	eq	1.13.0__11.el6
xorg-x11-server	eq	1.17.4__9.el6
xorg-x11-server	eq	1.15.0__25.1.el6_6

Rows per page:

1-10 of 1061

References

git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2023-1393

gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/

lists.fedoraproject.org/archives/list/[email protected]/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/

lists.fedoraproject.org/archives/list/[email protected]/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/

lists.fedoraproject.org/archives/list/[email protected]/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/

lists.fedoraproject.org/archives/list/[email protected]/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/

lists.fedoraproject.org/archives/list/[email protected]/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/

lists.fedoraproject.org/archives/list/[email protected]/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/

lists.fedoraproject.org/archives/list/[email protected]/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/

lists.fedoraproject.org/archives/list/[email protected]/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/

security.gentoo.org/glsa/202305-30

www.openwall.com/lists/oss-security/2023/03/29/1