Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: xorg.xvfb

Found 1 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2023-1393
7.8 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
created 2 months ago
A flaw was found in X.Org Server Overlay Window. A …

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.

References

Affected products

xorg-server
  • ==xorg-server 21.1.8

Matching in nixpkgs