PT-2022-7132 · Unknown+9 · X.Org Server+9

Published 2022-07-13 · Updated 2024-10-08 · CVE-2022-3551

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions X.org Server (affected versions not specified)

Description A memory leak issue has been found in the X.org Server, affecting the ProcXkbGetKbdByName function of the xkb/xkb.c file. The manipulation of this function leads to memory leak. This issue can be exploited by a remote attacker to cause a denial of service.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

ALSA-2023:2248

ALSA-2023:2249

ALSA-2023:2805

ALSA-2023:2806

ALT-PU-2022-3365

AZL-44250

BDU:2023-07831

CESA-2022_8491

CESA-2023_2805

CESA-2023_2806

CVE-2022-3551

DLA-3185-1

DSA-5278-1

MGASA-2022-0431

OESA-2022-2110

OPENSUSE-SU-2022_3857-1

OPENSUSE-SU-2022_3862-1

OPENSUSE-SU-2022_3941-1

OPENSUSE-SU-2024:12427-1

OPENSUSE-SU-2024:12428-1

RHSA-2022:8491

RHSA-2022_8491

RHSA-2023:2248

RHSA-2023:2249

RHSA-2023:2805

RHSA-2023:2806

RHSA-2023_2248

RHSA-2023_2249

RHSA-2023_2805

RHSA-2023_2806

ROSA-SA-2023-2092

SUSE-SU-2022:3840-1

SUSE-SU-2022:3841-1

SUSE-SU-2022:3850-1

SUSE-SU-2022:3856-1

SUSE-SU-2022:3857-1

SUSE-SU-2022:3862-1

SUSE-SU-2022:3863-1

SUSE-SU-2022:3941-1

USN-5740-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Suse

Ubuntu

X.Org Server

References · 97

• https://cgit.freedesktop.org/xorg/xserver/commit/?id=18f91b950e22c2a342a4fbc55e9ddf7534a707d2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3840-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2248 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-3551 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3857-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-2806.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2806.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3551 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2805.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2249.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07831 · Security Note
• https://osv.dev/vulnerability/AZL-44250 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3551 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5740-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2110 · Vendor Advisory