X.org Server xkb.c _GetCountedString buffer overflow
CVE-2022-3550

5.5MEDIUM

Key Information:

Vendor

X.org

Status
Server
Vendor
CVE Published:
17 October 2022

What is CVE-2022-3550?

A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211051.

Affected Version(s)

Server

References

https://cgit.freedesktop.org/xorg/xserver/commit/?id=11be...
https://vuldb.com/?id.211051
https://lists.debian.org/debian-lts-announce/2022/11/msg0...
mailing-list

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.