PT-2023-6641

CVE-2023-5574

·

Publicado

2023-10-25

·

Atualizado

2026-10-09

Descrição por

CVSS 3.1
7.0
Alta
MétricasAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions xorg-x11-server-Xvfb (affected versions not specified)
Description A use-after-free flaw was found in xorg-x11-server-Xvfb, specifically in a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ALSA-2024:2298
AZL-31703
AZL-45255
ECHO-AFEB-E40E-C22F
INFSA-2024_2298
MGASA-2023-0307
OESA-2024-2261
OESA-2024-2314
OESA-2024-2315
OESA-2024-2316
OESA-2024-2317
OPENSUSE-SU-2023_4272-1
OPENSUSE-SU-2023_4292-1
OPENSUSE-SU-2023_4293-1
OPENSUSE-SU-2023_4306-1
OPENSUSE-SU-2023_4338-1
OPENSUSE-SU-2024:13361-1
OPENSUSE-SU-2024:13467-1
RHSA-2024:2298
RHSA-2024_2298
SUSE-SU-2023:4269-1
SUSE-SU-2023:4272-1
SUSE-SU-2023:4292-1
SUSE-SU-2023:4293-1
SUSE-SU-2023:4306-1
SUSE-SU-2023:4338-1
ZDI-23-1807
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾