Vulnerability · Published Mar 30, 2023 · Assigned by redhat
CVE-2023-1393
High 7.8
In plain English
A high-severity use-after-free in xorg-server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.4%top 67.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | tigervnc | 1.12.0-9.el8_7.3 | ALSA-2023:1551 |
| AlmaLinux:9 | tigervnc | 1.12.0-5.el9_1.2 | ALSA-2023:1592 |
| AlmaLinux:8 | tigervnc-icons | 1.12.0-9.el8_7.3 | ALSA-2023:1551 |
| AlmaLinux:9 | tigervnc-icons | 1.12.0-5.el9_1.2 | ALSA-2023:1592 |
| AlmaLinux:8 | tigervnc-license | 1.12.0-9.el8_7.3 | ALSA-2023:1551 |
| AlmaLinux:9 | tigervnc-license | 1.12.0-5.el9_1.2 | ALSA-2023:1592 |
| AlmaLinux:8 | tigervnc-selinux | 1.12.0-9.el8_7.3 | ALSA-2023:1551 |
| AlmaLinux:9 | tigervnc-selinux | 1.12.0-5.el9_1.2 | ALSA-2023:1592 |
| AlmaLinux:8 | tigervnc-server | 1.12.0-9.el8_7.3 | ALSA-2023:1551 |
| AlmaLinux:9 | tigervnc-server | 1.12.0-5.el9_1.2 | ALSA-2023:1592 |
| AlmaLinux:8 | tigervnc-server-minimal | 1.12.0-9.el8_7.3 | ALSA-2023:1551 |
| AlmaLinux:9 | tigervnc-server-minimal | 1.12.0-5.el9_1.2 | ALSA-2023:1592 |
| AlmaLinux:8 | tigervnc-server-module | 1.12.0-9.el8_7.3 | ALSA-2023:1551 |
| AlmaLinux:9 | tigervnc-server-module | 1.12.0-5.el9_1.2 | ALSA-2023:1592 |
| AlmaLinux:8 | xorg-x11-server-Xdmx | 1.20.11-17.el8 | ALSA-2023:6916 |
| AlmaLinux:9 | xorg-x11-server-Xdmx | 1.20.11-19.el9 | ALSA-2023:6340 |
| AlmaLinux:8 | xorg-x11-server-Xephyr | 1.20.11-17.el8 | ALSA-2023:6916 |
| AlmaLinux:9 | xorg-x11-server-Xephyr | 1.20.11-19.el9 | ALSA-2023:6340 |
| AlmaLinux:8 | xorg-x11-server-Xnest | 1.20.11-17.el8 | ALSA-2023:6916 |
| AlmaLinux:9 | xorg-x11-server-Xnest | 1.20.11-19.el9 | ALSA-2023:6340 |
| AlmaLinux:8 | xorg-x11-server-Xorg | 1.20.11-17.el8 | ALSA-2023:6916 |
| AlmaLinux:9 | xorg-x11-server-Xorg | 1.20.11-19.el9 | ALSA-2023:6340 |
| AlmaLinux:8 | xorg-x11-server-Xvfb | 1.20.11-17.el8 | ALSA-2023:6916 |
| AlmaLinux:9 | xorg-x11-server-Xvfb | 1.20.11-19.el9 | ALSA-2023:6340 |
| AlmaLinux:8 | xorg-x11-server-Xwayland | 21.1.3-12.el8 | ALSA-2023:6917 |
| AlmaLinux:9 | xorg-x11-server-Xwayland | 22.1.9-2.el9 | ALSA-2023:6341 |
| AlmaLinux:8 | xorg-x11-server-common | 1.20.11-17.el8 | ALSA-2023:6916 |
| AlmaLinux:9 | xorg-x11-server-common | 1.20.11-19.el9 | ALSA-2023:6340 |
| AlmaLinux:8 | xorg-x11-server-devel | 1.20.11-17.el8 | ALSA-2023:6916 |
| AlmaLinux:9 | xorg-x11-server-devel | 1.20.11-19.el9 | ALSA-2023:6340 |
| AlmaLinux:8 | xorg-x11-server-source | 1.20.11-17.el8 | ALSA-2023:6916 |
| AlmaLinux:9 | xorg-x11-server-source | 1.20.11-19.el9 | ALSA-2023:6340 |
| Debian:12 | xorg-server | 2:21.1.7-2 | DEBIAN-CVE-2023-1393 |
| Debian:13 | xorg-server | 2:21.1.7-2 | DEBIAN-CVE-2023-1393 |
| Debian:14 | xorg-server | 2:21.1.7-2 | DEBIAN-CVE-2023-1393 |
| Debian:12 | xwayland | 2:22.1.9-1 | DEBIAN-CVE-2023-1393 |
| Debian:13 | xwayland | 2:22.1.9-1 | DEBIAN-CVE-2023-1393 |
| Debian:14 | xwayland | 2:22.1.9-1 | DEBIAN-CVE-2023-1393 |
| Rocky Linux:9 | tigervnc | 0:1.12.0-5.el9_1.2 | RLSA-2023:1592 |
| Ubuntu:22.04:LTS | tigervnc | 1.12.0+dfsg-4ubuntu0.22.04.1 | UBUNTU-CVE-2023-1393 |
| Ubuntu:22.04:LTS | xorg-server | 2:21.1.3-2ubuntu2.9 | USN-5986-1 |
| Ubuntu:22.04:LTS | xorg-server | 2:21.1.3-2ubuntu2.9 | UBUNTU-CVE-2023-1393 |
| Ubuntu:22.04:LTS | xwayland | 2:22.1.1-1ubuntu0.6 | UBUNTU-CVE-2023-1393 |
| Ubuntu:22.04:LTS | xwayland | 2:22.1.1-1ubuntu0.6 | USN-5986-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | xorg-server | xorg-server 21.1.8 |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.openwall.com/lists/oss-security/2023/03/29/1
- FEDORA-2023-eb3c27ff25 vendor-advisory
- FEDORA-2023-b7835960ac vendor-advisory
- FEDORA-2023-b87fd3a628 vendor-advisory
- FEDORA-2023-f754e7abfd vendor-advisory
- FEDORA-2023-66d5af0278 vendor-advisory
- FEDORA-2023-239bae4b57 vendor-advisory
- FEDORA-2023-fe18ae3e85 vendor-advisory
- FEDORA-2023-6f3f9ee721 vendor-advisory
- GLSA-202305-30 vendor-advisory
- https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110