VDB
DEBIAN-CVE-2022-2320
DEBIAN-CVE-2022-2320
PUBLISHED
CVSS 7.800000190734863 HIGH
A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to escalate privileges and execute arbitrary code in the context of root.
Risk Scores
CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | xwayland | 0, 0, 0 |
| Debian:14 | xwayland | 0, 0, 0 |
| Debian:12 | xwayland | 0, 0, 0 |
| Debian:14 | xorg-server | 0, 0, 0 |
| Debian:12 | xorg-server | 0, 0, 0 |
| Debian:13 | xorg-server | 0, 0, 0 |
| Debian:11 | xorg-server | 0, 1.20.11-1, 1.20.11-1 |
Timeline
- Sep 1, 2022 CVE Published
- Apr 28, 2026 CVE Updated