CVE-2023-5380

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.7 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
redhatCNA
4.7 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
VendorProductVersion
x.orgx_server
𝑥
< 21.1.9
x.orgxwayland
𝑥
< 23.2.2
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
debiandebian_linux
11.0
debiandebian_linux
12.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
xorg-server
bullseye
2:1.20.11-1+deb11u13
fixed
bullseye (security)
2:1.20.11-1+deb11u14
fixed
bookworm
2:21.1.7-3+deb12u8
fixed
bookworm (security)
2:21.1.7-3+deb12u8
fixed
sid
2:21.1.15-2
fixed
trixie
2:21.1.15-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xorg
oracular
not-affected
noble
not-affected
mantic
not-affected
lunar
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
ignored
xorg-hwe-16.04
oracular
dne
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
dne
xorg-hwe-18.04
oracular
dne
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
xorg-server
oracular
Fixed 2:21.1.7-3ubuntu2.1
released
noble
Fixed 2:21.1.7-3ubuntu2.1
released
mantic
Fixed 2:21.1.7-3ubuntu2.1
released
lunar
Fixed 2:21.1.7-1ubuntu3.1
released
jammy
Fixed 2:21.1.4-2ubuntu1.7~22.04.2
released
focal
Fixed 2:1.20.13-1ubuntu1~20.04.9
released
bionic
Fixed 2:1.19.6-1ubuntu4.15+esm1
released
xenial
Fixed 2:1.18.4-0ubuntu0.12+esm6
released
trusty
Fixed 2:1.15.1-0ubuntu2.11+esm8
released
xorg-server-hwe-16.04
oracular
dne
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
needs-triage
trusty
dne
xorg-server-hwe-18.04
oracular
dne
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
needs-triage
xenial
dne
trusty
dne
xorg-server-lts-utopic
oracular
dne
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
xorg-server-lts-vivid
oracular
dne
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
xorg-server-lts-wily
oracular
dne
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
xorg-server-lts-xenial
oracular
dne
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
xwayland
oracular
not-affected
noble
not-affected
mantic
not-affected
lunar
not-affected
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
References