CVE-2022-3551
17.10.2022, 13:15
A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211052.Enginsight
| Vendor | Product | Version |
|---|---|---|
| x.org | x_server | 𝑥 < 21.1.6 |
| debian | debian_linux | 10.0 |
| debian | debian_linux | 11.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| xorg-server |
| ||||||||||||||
| xorg-server-hwe-16.04 |
| ||||||||||||||
| xorg-server-hwe-18.04 |
| ||||||||||||||
| xorg-server-lts-utopic |
| ||||||||||||||
| xorg-server-lts-vivid |
| ||||||||||||||
| xorg-server-lts-wily |
| ||||||||||||||
| xorg-server-lts-xenial |
| ||||||||||||||
| xwayland |
|
Common Weakness Enumeration
- CWE-404 - Improper Resource Shutdown or ReleaseThe program does not release or incorrectly releases a resource before it is made available for re-use.
- CWE-401 - Missing Release of Memory after Effective LifetimeThe software does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
References