Home > Vulnerability Database > CVE-2022-46343

Mend.io Vulnerability Database

CVE-2022-46343

Good to know:

Date: December 14, 2022

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

Language: C

Severity Score

8.8

Related Resources (15)

Url: https://access.redhat.com/errata/RHSA-2023:0046

Url: https://access.redhat.com/errata/RHSA-2023:0045

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/

Url: https://security-tracker.debian.org/tracker/CVE-2022-46343

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/

Url: https://access.redhat.com/security/cve/CVE-2022-46343

Url: https://nvd.nist.gov/vuln/detail/CVE-2022-46343

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/

Url: https://www.debian.org/security/2022/dsa-5304

Url: https://security.gentoo.org/glsa/202305-30

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2151758

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/

Url: https://www.mend.io/vulnerability-database/CVE-2022-46343

Severity Score

8.8

Weakness Type (CWE)

Use After Free

CWE-416

Top Fix

Upgrade Version

Upgrade to version xorg-server-21.1.5,xwayland-22.1.6

Learn More

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Mend.io Vulnerability Database

We found results for “”

CVE-2022-46343

Good to know:

Date: December 14, 2022

Language: C

Severity Score

Related Resources (15)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

Do you need more information?