Log in Start free

Vulnerability · Published Oct 25, 2023 · Assigned by redhat

CVE-2023-5574Xorg-x11-server: use-after-free bug in damagedestroy

High 7.0

In plain English

A high-severity use-after-free in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.0High
Exploit odds (30 days)0.6%top 50.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9tigervnc1.13.1-8.el9ALSA-2024:2298
AlmaLinux:9tigervnc-icons1.13.1-8.el9ALSA-2024:2298
AlmaLinux:9tigervnc-license1.13.1-8.el9ALSA-2024:2298
AlmaLinux:9tigervnc-selinux1.13.1-8.el9ALSA-2024:2298
AlmaLinux:9tigervnc-server1.13.1-8.el9ALSA-2024:2298
AlmaLinux:9tigervnc-server-minimal1.13.1-8.el9ALSA-2024:2298
AlmaLinux:9tigervnc-server-module1.13.1-8.el9ALSA-2024:2298
Alpine:v3.20xorg-server21.1.9-r0ALPINE-CVE-2023-5574
Alpine:v3.21xorg-server21.1.9-r0ALPINE-CVE-2023-5574
Alpine:v3.22xorg-server21.1.9-r0ALPINE-CVE-2023-5574
Alpine:v3.23xorg-server21.1.9-r0ALPINE-CVE-2023-5574
Alpine:v3.24xorg-server21.1.9-r0ALPINE-CVE-2023-5574
Debian:12xorg-serverno fix listedDEBIAN-CVE-2023-5574
Debian:13xorg-serverno fix listedDEBIAN-CVE-2023-5574
Debian:14xorg-serverno fix listedDEBIAN-CVE-2023-5574
Ubuntu:22.04:LTSxorg-serverno fix listedUBUNTU-CVE-2023-5574
Ubuntu:24.04:LTSxorg-serverno fix listedUBUNTU-CVE-2023-5574
Ubuntu:25.10xorg-serverno fix listedUBUNTU-CVE-2023-5574
Ubuntu:26.04:LTSxorg-serverno fix listedUBUNTU-CVE-2023-5574
Ubuntu:26.10xorg-serverno fix listedUBUNTU-CVE-2023-5574

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References