ALT-PU-2022-2257-1

Package update xorg-server in branch p10

Version1.20.14-alt4

Published2022-07-15

Max severityHIGH

Severity:

Closed issues (4)

HIGH7.6

Уязвимость обработчика вызовов ProcXkbSetGeometry сервера X.Org Server, позволяющая нарушителю выполнить произвольный код или повысить свои привилегии

Published: 2022-08-02Modified: 2024-09-16

CVSS 3.xHIGH 7.6

CVSS:3.x/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

CVSS 2.0CRITICAL 9.0

CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:P/A:P

References

CVE-2022-2319

HIGH7.8

Уязвимость обработчика вызовов ProcXkbSetDeviceInfo сервера X.Org Server, позволяющая нарушителю выполнить произвольный код или повысить свои привилегии

Published: 2022-08-02Modified: 2024-09-16

CVSS 3.xHIGH 7.8

CVSS:3.x/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0HIGH 7.2

CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C

References

HIGH7.8

A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request length.

Published: 2022-09-01Modified: 2025-08-29

CVSS 3.xHIGH 7.8

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

HIGH7.8

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to escalate privileges and execute arbitrary code in the context of root.

Published: 2022-09-01Modified: 2025-08-29

CVSS 3.xHIGH 7.8

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References