CVE-2022-46343
CVE-2022-46343
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
CVSS 8.8 · Élevée · EPSS 2,6% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
xorg-x11-server
- Versions du logiciel
- xorg-x11-server-1.20.4: Concernée
Aucun correctif publié
xorg-server Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2:21.1.5-1
Mettez à jour vers 2:21.1.5-1
xorg-server Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2:21.1.5-1
Mettez à jour vers 2:21.1.5-1
xorg-server Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2:21.1.5-1
Mettez à jour vers 2:21.1.5-1
xwayland Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2:22.1.6-1
Mettez à jour vers 2:22.1.6-1
xwayland Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2:22.1.6-1
Mettez à jour vers 2:22.1.6-1
xwayland Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2:22.1.6-1
Mettez à jour vers 2:22.1.6-1
xorg-server Ubuntu:Pro:14.04:LTS
- Versions du logiciel
- 2:1.14.3-3ubuntu2
- 2:1.14.3-3ubuntu3
- 2:1.14.3-3ubuntu4
- 2:1.14.3-5ubuntu1
- 2:1.14.4-1ubuntu1
- 2:1.14.4-1ubuntu2
- 2:1.14.4.901-0ubuntu2
- 2:1.14.5-1ubuntu2
- 2:1.14.5-1ubuntu4
- 2:1.15.0-1ubuntu1
- 2:1.15.0-1ubuntu2
- 2:1.15.0-1ubuntu3
- 2:1.15.0-1ubuntu4
- 2:1.15.0-1ubuntu6
- 2:1.15.0-1ubuntu7
- 2:1.15.1-0ubuntu1
- 2:1.15.1-0ubuntu2
- 2:1.15.1-0ubuntu2.1
- 2:1.15.1-0ubuntu2.4
- 2:1.15.1-0ubuntu2.5
- 2:1.15.1-0ubuntu2.6
- 2:1.15.1-0ubuntu2.7
- 2:1.15.1-0ubuntu2.9
- 2:1.15.1-0ubuntu2.10
- 2:1.15.1-0ubuntu2.11
- 2:1.15.1-0ubuntu2.11+esm2
- 2:1.15.1-0ubuntu2.11+esm3
- 2:1.15.1-0ubuntu2.11+esm4
- 2:1.15.1-0ubuntu2.11+esm5
- 2:1.15.1-0ubuntu2.11+esm6
- Plages de versions concernées
- ECOSYSTEM: < 2:1.15.1-0ubuntu2.11+esm7
Mettez à jour vers 2:1.15.1-0ubuntu2.11+esm7
xorg-server Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 2:1.17.2-1ubuntu9
- 2:1.17.2-1ubuntu10
- 2:1.17.3-2ubuntu1
- 2:1.17.3-2ubuntu2
- 2:1.17.3-2ubuntu3
- 2:1.17.3-2ubuntu4
- 2:1.18.1-1ubuntu3
- 2:1.18.1-1ubuntu4
- 2:1.18.3-1ubuntu1
- 2:1.18.3-1ubuntu2
- 2:1.18.3-1ubuntu2.2
- 2:1.18.3-1ubuntu2.3
- 2:1.18.4-0ubuntu0.1
- 2:1.18.4-0ubuntu0.2
- 2:1.18.4-0ubuntu0.3
- 2:1.18.4-0ubuntu0.4
- 2:1.18.4-0ubuntu0.6
- 2:1.18.4-0ubuntu0.7
- 2:1.18.4-0ubuntu0.8
- 2:1.18.4-0ubuntu0.9
- 2:1.18.4-0ubuntu0.10
- 2:1.18.4-0ubuntu0.11
- 2:1.18.4-0ubuntu0.12
- 2:1.18.4-0ubuntu0.12+esm1
- 2:1.18.4-0ubuntu0.12+esm2
- 2:1.18.4-0ubuntu0.12+esm4
- Plages de versions concernées
- ECOSYSTEM: < 2:1.18.4-0ubuntu0.12+esm5
Mettez à jour vers 2:1.18.4-0ubuntu0.12+esm5
xorg-server-hwe-16.04 Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 2:1.18.4-1ubuntu6.1~16.04.1
- 2:1.18.4-1ubuntu6.1~16.04.2
- 2:1.19.3-1ubuntu1~16.04.2
- 2:1.19.3-1ubuntu1~16.04.3
- 2:1.19.3-1ubuntu1~16.04.4
- 2:1.19.5-0ubuntu2~16.04.1
- 2:1.19.6-1ubuntu4~16.04.1
- 2:1.19.6-1ubuntu4.1~16.04.1
- 2:1.19.6-1ubuntu4.1~16.04.2
- 2:1.19.6-1ubuntu4.1~16.04.3
- 2:1.19.6-1ubuntu4.1~16.04.4
- 2:1.19.6-1ubuntu4.1~16.04.5
- 2:1.19.6-1ubuntu4.1~16.04.6
- 2:1.19.6-1ubuntu4.1~16.04.6+esm1
- 2:1.19.6-1ubuntu4.1~16.04.6+esm3
- Plages de versions concernées
- ECOSYSTEM: < 2:1.19.6-1ubuntu4.1~16.04.6+esm4
Mettez à jour vers 2:1.19.6-1ubuntu4.1~16.04.6+esm4
xorg-server Ubuntu:18.04:LTS
- Versions du logiciel
- 2:1.19.5-0ubuntu2
- 2:1.19.6-1ubuntu1
- 2:1.19.6-1ubuntu2
- 2:1.19.6-1ubuntu3
- 2:1.19.6-1ubuntu4
- 2:1.19.6-1ubuntu4.1
- 2:1.19.6-1ubuntu4.2
- 2:1.19.6-1ubuntu4.3
- 2:1.19.6-1ubuntu4.4
- 2:1.19.6-1ubuntu4.5
- 2:1.19.6-1ubuntu4.6
- 2:1.19.6-1ubuntu4.7
- 2:1.19.6-1ubuntu4.8
- 2:1.19.6-1ubuntu4.9
- 2:1.19.6-1ubuntu4.10
- 2:1.19.6-1ubuntu4.11
- 2:1.19.6-1ubuntu4.12
- Plages de versions concernées
- ECOSYSTEM: < 2:1.19.6-1ubuntu4.13
Mettez à jour vers 2:1.19.6-1ubuntu4.13
xorg-server-hwe-18.04 Ubuntu:18.04:LTS
- Versions du logiciel
- 2:1.20.1-3ubuntu2.1~18.04.1
- 2:1.20.4-1ubuntu3~18.04.1
- 2:1.20.5+git20191008-0ubuntu1~18.04.1
- 2:1.20.8-2ubuntu2.1~18.04.1
- 2:1.20.8-2ubuntu2.2~18.04.1
- 2:1.20.8-2ubuntu2.2~18.04.2
- 2:1.20.8-2ubuntu2.2~18.04.3
- 2:1.20.8-2ubuntu2.2~18.04.4
- 2:1.20.8-2ubuntu2.2~18.04.5
- 2:1.20.8-2ubuntu2.2~18.04.6
- 2:1.20.8-2ubuntu2.2~18.04.7
- 2:1.20.8-2ubuntu2.2~18.04.8
- Plages de versions concernées
- ECOSYSTEM: < 2:1.20.8-2ubuntu2.2~18.04.9
Mettez à jour vers 2:1.20.8-2ubuntu2.2~18.04.9
xorg-server Ubuntu:20.04:LTS
- Versions du logiciel
- 2:1.20.5+git20191008-0ubuntu1
- 2:1.20.6-1ubuntu1
- 2:1.20.7-2ubuntu1
- 2:1.20.7-2ubuntu2
- 2:1.20.8-2ubuntu2
- 2:1.20.8-2ubuntu2.1
- 2:1.20.8-2ubuntu2.2
- 2:1.20.8-2ubuntu2.3
- 2:1.20.8-2ubuntu2.4
- 2:1.20.8-2ubuntu2.6
- 2:1.20.9-2ubuntu1.1~20.04.1
- 2:1.20.9-2ubuntu1.2~20.04.1
- 2:1.20.9-2ubuntu1.2~20.04.2
- 2:1.20.11-1ubuntu1~20.04.2
- 2:1.20.13-1ubuntu1~20.04.2
- 2:1.20.13-1ubuntu1~20.04.3
- 2:1.20.13-1ubuntu1~20.04.4
- Plages de versions concernées
- ECOSYSTEM: < 2:1.20.13-1ubuntu1~20.04.5
Mettez à jour vers 2:1.20.13-1ubuntu1~20.04.5
xorg-server Ubuntu:22.04:LTS
- Versions du logiciel
- 2:1.20.13-1ubuntu1
- 2:1.20.13-1ubuntu2
- 2:1.20.14-1ubuntu1
- 2:21.1.3-2ubuntu2
- 2:21.1.3-2ubuntu2.1
- 2:21.1.3-2ubuntu2.2
- 2:21.1.3-2ubuntu2.3
- 2:21.1.3-2ubuntu2.4
- Plages de versions concernées
- ECOSYSTEM: < 2:21.1.3-2ubuntu2.5
Mettez à jour vers 2:21.1.3-2ubuntu2.5
xwayland Ubuntu:22.04:LTS
- Versions du logiciel
- 2:21.1.2-0ubuntu1
- 2:21.1.3-1
- 2:21.1.3-1ubuntu1
- 2:21.1.4-1
- 2:22.1.0-1
- 2:22.1.1-1
- 2:22.1.1-1ubuntu0.1
- 2:22.1.1-1ubuntu0.2
- 2:22.1.1-1ubuntu0.3
- Plages de versions concernées
- ECOSYSTEM: < 2:22.1.1-1ubuntu0.4
Mettez à jour vers 2:22.1.1-1ubuntu0.4
Sources originales
- https://access.redhat.com/security/cve/CVE-2022-46343
- https://bugzilla.redhat.com/show_bug.cgi?id=2151758
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/
- https://www.debian.org/security/2022/dsa-5304
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/
- https://security.gentoo.org/glsa/202305-30
- https://nvd.nist.gov/vuln/detail/CVE-2022-46343