PT-2022-7135 · X.Org+9 · X.Org Server+9
Jan-Niklas Sohn
·
Published
2022-11-21
·
Updated
2024-10-08
·
CVE-2022-46340
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
X.Org Server (affected versions not specified)
Description
The issue is related to a buffer overflow in the XTestSwapFakeInput function of the X.Org Server, which can be exploited by a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability occurs because the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through the XTestFakeInput request. This can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. However, it does not affect systems where the client and server use the same byte order.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Suse
Ubuntu
X.Org Server