X.org Server xkb.c ProcXkbGetKbdByName memory leak
CVE-2022-3551

3.5LOW

Key Information:

Vendor

X.org

Status
Server
Vendor
CVE Published:
17 October 2022

What is CVE-2022-3551?

A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211052.

Affected Version(s)

Server

References

https://cgit.freedesktop.org/xorg/xserver/commit/?id=18f9...
https://vuldb.com/?id.211052
https://lists.debian.org/debian-lts-announce/2022/11/msg0...
mailing-list

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.