CVE-2023-1393

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
redhatCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
VendorProductVersion
x.orgxorg-server
𝑥
< 21.1.8
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
xorg-server
bullseye
2:1.20.11-1+deb11u13
fixed
bullseye (security)
2:1.20.11-1+deb11u14
fixed
bookworm
2:21.1.7-3+deb12u8
fixed
bookworm (security)
2:21.1.7-3+deb12u8
fixed
trixie
2:21.1.15-2
fixed
sid
2:21.1.15-2
fixed
xwayland
bookworm
2:22.1.9-1
fixed
trixie
2:24.1.4-2
fixed
sid
2:24.1.4-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tigervnc
oracular
not-affected
noble
not-affected
mantic
Fixed 1.12.0+dfsg-8ubuntu0.23.10.1
released
lunar
Fixed 1.12.0+dfsg-8ubuntu0.23.04.1
released
jammy
Fixed 1.12.0+dfsg-4ubuntu0.22.04.1
released
focal
Fixed 1.10.1+dfsg-3ubuntu0.20.04.1
released
bionic
needs-triage
xenial
ignored
trusty
ignored
xorg-server
oracular
Fixed 2:21.1.7-1ubuntu3
released
noble
Fixed 2:21.1.7-1ubuntu3
released
mantic
Fixed 2:21.1.7-1ubuntu3
released
lunar
Fixed 2:21.1.7-1ubuntu3
released
kinetic
Fixed 2:21.1.4-2ubuntu1.7
released
jammy
Fixed 2:21.1.3-2ubuntu2.9
released
focal
Fixed 2:1.20.13-1ubuntu1~20.04.8
released
bionic
Fixed 2:1.19.6-1ubuntu4.15
released
xenial
needs-triage
trusty
ignored
xorg-server-hwe-16.04
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
needs-triage
trusty
dne
xorg-server-hwe-18.04
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 2:1.20.8-2ubuntu2.2~18.04.11
released
xenial
dne
trusty
dne
xorg-server-lts-utopic
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
xorg-server-lts-vivid
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
xorg-server-lts-wily
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
xorg-server-lts-xenial
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
xwayland
oracular
Fixed 2:22.1.8-1ubuntu1
released
noble
Fixed 2:22.1.8-1ubuntu1
released
mantic
Fixed 2:22.1.8-1ubuntu1
released
lunar
Fixed 2:22.1.8-1ubuntu1
released
kinetic
Fixed 2:22.1.3-2ubuntu0.4
released
jammy
Fixed 2:22.1.1-1ubuntu0.6
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
Common Weakness Enumeration
References
https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/
https://security.gentoo.org/glsa/202305-30
https://www.openwall.com/lists/oss-security/2023/03/29/1
https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/
https://security.gentoo.org/glsa/202305-30
https://www.openwall.com/lists/oss-security/2023/03/29/1