CVE-2022-46344

xwayland: A vulnerability was found in X.Org

CVE-2022-46344 is fixed in 42 products on 1 platform, first by xdmx 2:1.19.6-1ubuntu4.13, released December 13, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0290
87th percentile

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

Where it's fixed

ProductFixed inFixReleased
Linux
tigervnc · RHEL 8 0:1.12.0-15.el8_8 RHSA-2023:2830 May 16, 2023
tigervnc · RHEL 9 0:1.12.0-13.el9_2 RHSA-2023:2257 May 9, 2023
tigervnc · almalinux 8 1.12.0-15.el8_8 ALSA-2023:2830 May 16, 2023
tigervnc · almalinux 9 1.12.0-13.el9_2 ALSA-2023:2257 May 9, 2023
tigervnc · ol 8 0:1.12.0-15.el8_8 ELSA-2023-2830 May 24, 2023
tigervnc · ol 9 0:1.12.0-13.el9_2 ELSA-2023-2257 May 15, 2023
tigervnc-icons · RHEL 8 0:1.12.0-15.el8_8 RHSA-2023:2830 May 16, 2023
tigervnc-icons · RHEL 9 0:1.12.0-13.el9_2 RHSA-2023:2257 May 9, 2023
tigervnc-icons · almalinux 8 1.12.0-15.el8_8 ALSA-2023:2830 May 16, 2023
tigervnc-icons · almalinux 9 1.12.0-13.el9_2 ALSA-2023:2257 May 9, 2023
tigervnc-icons · ol 8 0:1.12.0-15.el8_8 ELSA-2023-2830 May 24, 2023
tigervnc-icons · ol 9 0:1.12.0-13.el9_2 ELSA-2023-2257 May 15, 2023
tigervnc-license · RHEL 8 0:1.12.0-15.el8_8 RHSA-2023:2830 May 16, 2023
tigervnc-license · RHEL 9 0:1.12.0-13.el9_2 RHSA-2023:2257 May 9, 2023
tigervnc-license · almalinux 8 1.12.0-15.el8_8 ALSA-2023:2830 May 16, 2023
tigervnc-license · almalinux 9 1.12.0-13.el9_2 ALSA-2023:2257 May 9, 2023
tigervnc-license · ol 8 0:1.12.0-15.el8_8 ELSA-2023-2830 May 24, 2023
tigervnc-license · ol 9 0:1.12.0-13.el9_2 ELSA-2023-2257 May 15, 2023
tigervnc-selinux · RHEL 8 0:1.12.0-15.el8_8 RHSA-2023:2830 May 16, 2023
tigervnc-selinux · RHEL 9 0:1.12.0-13.el9_2 RHSA-2023:2257 May 9, 2023
tigervnc-selinux · almalinux 8 1.12.0-15.el8_8 ALSA-2023:2830 May 16, 2023
tigervnc-selinux · almalinux 9 1.12.0-13.el9_2 ALSA-2023:2257 May 9, 2023
tigervnc-selinux · ol 8 0:1.12.0-15.el8_8 ELSA-2023-2830 May 24, 2023
tigervnc-selinux · ol 9 0:1.12.0-13.el9_2 ELSA-2023-2257 May 15, 2023
tigervnc-server · RHEL 8 0:1.12.0-15.el8_8 RHSA-2023:2830 May 16, 2023
tigervnc-server · RHEL 9 0:1.12.0-13.el9_2 RHSA-2023:2257 May 9, 2023
tigervnc-server · almalinux 8 1.12.0-15.el8_8 ALSA-2023:2830 May 16, 2023
tigervnc-server · almalinux 9 1.12.0-13.el9_2 ALSA-2023:2257 May 9, 2023
tigervnc-server · ol 8 0:1.12.0-15.el8_8 ELSA-2023-2830 May 24, 2023
tigervnc-server · ol 9 0:1.12.0-13.el9_2 ELSA-2023-2257 May 15, 2023
tigervnc-server-minimal · RHEL 8 0:1.12.0-15.el8_8 RHSA-2023:2830 May 16, 2023
tigervnc-server-minimal · RHEL 9 0:1.12.0-13.el9_2 RHSA-2023:2257 May 9, 2023
tigervnc-server-minimal · almalinux 8 1.12.0-15.el8_8 ALSA-2023:2830 May 16, 2023
tigervnc-server-minimal · almalinux 9 1.12.0-13.el9_2 ALSA-2023:2257 May 9, 2023
tigervnc-server-minimal · ol 8 0:1.12.0-15.el8_8 ELSA-2023-2830 May 24, 2023
tigervnc-server-minimal · ol 9 0:1.12.0-13.el9_2 ELSA-2023-2257 May 15, 2023
tigervnc-server-module · RHEL 8 0:1.12.0-15.el8_8 RHSA-2023:2830 May 16, 2023
tigervnc-server-module · RHEL 9 0:1.12.0-13.el9_2 RHSA-2023:2257 May 9, 2023
tigervnc-server-module · almalinux 8 1.12.0-15.el8_8 ALSA-2023:2830 May 16, 2023
tigervnc-server-module · almalinux 9 1.12.0-13.el9_2 ALSA-2023:2257 May 9, 2023
tigervnc-server-module · ol 8 0:1.12.0-15.el8_8 ELSA-2023-2830 May 24, 2023
tigervnc-server-module · ol 9 0:1.12.0-13.el9_2 ELSA-2023-2257 May 15, 2023
xdmx · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xdmx 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xdmx · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xdmx 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xdmx-tools · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xdmx-tools 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xdmx-tools · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xdmx-tools 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xmir · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xmir 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xnest · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xnest 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xnest · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xnest 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xnest · Ubuntu 22.04.1 LTS (jammy) 2:21.1.3-2ubuntu2.5 xnest 2:21.1.3-2ubuntu2.5 Dec 13, 2022
xorg-server · Debian 12.15 (bookworm) 2:21.1.5-1 DEBIAN-CVE-2022-46344 Dec 14, 2022
xorg-server · Debian 13.5 (trixie) 2:21.1.5-1 DEBIAN-CVE-2022-46344 Dec 14, 2022
xorg-server · Debian 14 2:21.1.5-1 DEBIAN-CVE-2022-46344 Dec 14, 2022
xorg-server-source · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xorg-server-source 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xorg-server-source · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xorg-server-source 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xorg-server-source · Ubuntu 22.04.1 LTS (jammy) 2:21.1.3-2ubuntu2.5 xorg-server-source 2:21.1.3-2ubuntu2.5 Dec 13, 2022
xorg-server-source-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.9 xorg-server-source-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.9 Dec 13, 2022
xorg-x11-server-Xdmx · RHEL 8 0:1.20.11-15.el8 RHSA-2023:2806 May 16, 2023
xorg-x11-server-Xdmx · RHEL 9 0:1.20.11-17.el9 RHSA-2023:2248 May 9, 2023
xorg-x11-server-Xdmx · almalinux 8 1.20.11-15.el8 ALSA-2023:2806 May 16, 2023
xorg-x11-server-Xdmx · almalinux 9 1.20.11-17.el9 ALSA-2023:2248 May 9, 2023
xorg-x11-server-Xdmx · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xdmx · ol 8 0:1.20.11-15.el8 ELSA-2023-2806 May 24, 2023
xorg-x11-server-Xdmx · ol 9 0:1.20.11-17.el9 ELSA-2023-2248 May 15, 2023
xorg-x11-server-Xdmx-debuginfo · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xephyr · RHEL 8 0:1.20.11-15.el8 RHSA-2023:2806 May 16, 2023
xorg-x11-server-Xephyr · RHEL 9 0:1.20.11-17.el9 RHSA-2023:2248 May 9, 2023
xorg-x11-server-Xephyr · almalinux 8 1.20.11-15.el8 ALSA-2023:2806 May 16, 2023
xorg-x11-server-Xephyr · almalinux 9 1.20.11-17.el9 ALSA-2023:2248 May 9, 2023
xorg-x11-server-Xephyr · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xephyr · ol 8 0:1.20.11-15.el8 ELSA-2023-2806 May 24, 2023
xorg-x11-server-Xephyr · ol 9 0:1.20.11-17.el9 ELSA-2023-2248 May 15, 2023
xorg-x11-server-Xephyr-debuginfo · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xnest · RHEL 8 0:1.20.11-15.el8 RHSA-2023:2806 May 16, 2023
xorg-x11-server-Xnest · RHEL 9 0:1.20.11-17.el9 RHSA-2023:2248 May 9, 2023
xorg-x11-server-Xnest · almalinux 8 1.20.11-15.el8 ALSA-2023:2806 May 16, 2023
xorg-x11-server-Xnest · almalinux 9 1.20.11-17.el9 ALSA-2023:2248 May 9, 2023
xorg-x11-server-Xnest · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xnest · ol 8 0:1.20.11-15.el8 ELSA-2023-2806 May 24, 2023
xorg-x11-server-Xnest · ol 9 0:1.20.11-17.el9 ELSA-2023-2248 May 15, 2023
xorg-x11-server-Xnest-debuginfo · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xorg · RHEL 8 0:1.20.11-15.el8 RHSA-2023:2806 May 16, 2023
xorg-x11-server-Xorg · RHEL 9 0:1.20.11-17.el9 RHSA-2023:2248 May 9, 2023
xorg-x11-server-Xorg · almalinux 8 1.20.11-15.el8 ALSA-2023:2806 May 16, 2023
xorg-x11-server-Xorg · almalinux 9 1.20.11-17.el9 ALSA-2023:2248 May 9, 2023
xorg-x11-server-Xorg · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xorg · ol 8 0:1.20.11-15.el8 ELSA-2023-2806 May 24, 2023
xorg-x11-server-Xorg · ol 9 0:1.20.11-17.el9 ELSA-2023-2248 May 15, 2023
xorg-x11-server-Xorg-debuginfo · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xvfb · RHEL 8 0:1.20.11-15.el8 RHSA-2023:2806 May 16, 2023
xorg-x11-server-Xvfb · RHEL 9 0:1.20.11-17.el9 RHSA-2023:2248 May 9, 2023
xorg-x11-server-Xvfb · almalinux 8 1.20.11-15.el8 ALSA-2023:2806 May 16, 2023
xorg-x11-server-Xvfb · almalinux 9 1.20.11-17.el9 ALSA-2023:2248 May 9, 2023
xorg-x11-server-Xvfb · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xvfb · ol 8 0:1.20.11-15.el8 ELSA-2023-2806 May 24, 2023
xorg-x11-server-Xvfb · ol 9 0:1.20.11-17.el9 ELSA-2023-2248 May 15, 2023
xorg-x11-server-Xvfb-debuginfo · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-Xwayland · RHEL 8 0:21.1.3-10.el8 RHSA-2023:2805 May 16, 2023
xorg-x11-server-Xwayland · RHEL 9 0:21.1.3-7.el9 RHSA-2023:2249 May 9, 2023
xorg-x11-server-Xwayland · almalinux 8 21.1.3-10.el8 ALSA-2023:2805 May 16, 2023
xorg-x11-server-Xwayland · almalinux 9 21.1.3-7.el9 ALSA-2023:2249 May 9, 2023
xorg-x11-server-Xwayland · ol 8 0:21.1.3-10.el8 ELSA-2023-2805 May 24, 2023
xorg-x11-server-Xwayland · ol 9 0:21.1.3-7.el9 ELSA-2023-2249 May 15, 2023
xorg-x11-server-common · RHEL 8 0:1.20.11-15.el8 RHSA-2023:2806 May 16, 2023
xorg-x11-server-common · RHEL 9 0:1.20.11-17.el9 RHSA-2023:2248 May 9, 2023
xorg-x11-server-common · almalinux 8 1.20.11-15.el8 ALSA-2023:2806 May 16, 2023
xorg-x11-server-common · almalinux 9 1.20.11-17.el9 ALSA-2023:2248 May 9, 2023
xorg-x11-server-common · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-common · ol 8 0:1.20.11-15.el8 ELSA-2023-2806 May 24, 2023
xorg-x11-server-common · ol 9 0:1.20.11-17.el9 ELSA-2023-2248 May 15, 2023
xorg-x11-server-debuginfo · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-debugsource · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-devel · RHEL 8 0:1.20.11-15.el8 RHSA-2023:2806 May 16, 2023
xorg-x11-server-devel · RHEL 9 0:1.20.11-17.el9 RHSA-2023:2248 May 9, 2023
xorg-x11-server-devel · almalinux 8 1.20.11-15.el8 ALSA-2023:2806 May 16, 2023
xorg-x11-server-devel · almalinux 9 1.20.11-17.el9 ALSA-2023:2248 May 9, 2023
xorg-x11-server-devel · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-devel · ol 8 0:1.20.11-15.el8 ELSA-2023-2806 May 24, 2023
xorg-x11-server-devel · ol 9 0:1.20.11-17.el9 ELSA-2023-2248 May 15, 2023
xorg-x11-server-source · RHEL 8 0:1.20.11-15.el8 RHSA-2023:2806 May 16, 2023
xorg-x11-server-source · RHEL 9 0:1.20.11-17.el9 RHSA-2023:2248 May 9, 2023
xorg-x11-server-source · almalinux 8 1.20.11-15.el8 ALSA-2023:2806 May 16, 2023
xorg-x11-server-source · almalinux 9 1.20.11-17.el9 ALSA-2023:2248 May 9, 2023
xorg-x11-server-source · amzn 2023 1.20.14-12.amzn2023.0.2 ALAS2023-2023-102 Feb 17, 2023
xorg-x11-server-source · ol 8 0:1.20.11-15.el8 ELSA-2023-2806 May 24, 2023
xorg-x11-server-source · ol 9 0:1.20.11-17.el9 ELSA-2023-2248 May 15, 2023
xserver-common · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xserver-common 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xserver-common · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xserver-common 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xserver-common · Ubuntu 22.04.1 LTS (jammy) 2:21.1.3-2ubuntu2.5 xserver-common 2:21.1.3-2ubuntu2.5 Dec 13, 2022
xserver-xephyr · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xserver-xephyr 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xserver-xephyr · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xserver-xephyr 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xserver-xephyr · Ubuntu 22.04.1 LTS (jammy) 2:21.1.3-2ubuntu2.5 xserver-xephyr 2:21.1.3-2ubuntu2.5 Dec 13, 2022
xserver-xephyr-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.9 xserver-xephyr-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.9 Dec 13, 2022
xserver-xorg-core · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xserver-xorg-core 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xserver-xorg-core · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xserver-xorg-core 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xserver-xorg-core · Ubuntu 22.04.1 LTS (jammy) 2:21.1.3-2ubuntu2.5 xserver-xorg-core 2:21.1.3-2ubuntu2.5 Dec 13, 2022
xserver-xorg-core-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.9 xserver-xorg-core-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.9 Dec 13, 2022
xserver-xorg-dev-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.9 xserver-xorg-dev-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.9 Dec 13, 2022
xserver-xorg-legacy · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xserver-xorg-legacy 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xserver-xorg-legacy · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xserver-xorg-legacy 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xserver-xorg-legacy · Ubuntu 22.04.1 LTS (jammy) 2:21.1.3-2ubuntu2.5 xserver-xorg-legacy 2:21.1.3-2ubuntu2.5 Dec 13, 2022
xserver-xorg-legacy-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.9 xserver-xorg-legacy-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.9 Dec 13, 2022
xserver-xorg-xmir · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xserver-xorg-xmir 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xvfb · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xvfb 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xvfb · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xvfb 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xvfb · Ubuntu 22.04.1 LTS (jammy) 2:21.1.3-2ubuntu2.5 xvfb 2:21.1.3-2ubuntu2.5 Dec 13, 2022
xwayland · Debian 12.15 (bookworm) 2:22.1.6-1 DEBIAN-CVE-2022-46344 Dec 14, 2022
xwayland · Debian 13.5 (trixie) 2:22.1.6-1 DEBIAN-CVE-2022-46344 Dec 14, 2022
xwayland · Debian 14 2:22.1.6-1 DEBIAN-CVE-2022-46344 Dec 14, 2022
xwayland · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.13 xwayland 2:1.19.6-1ubuntu4.13 Dec 13, 2022
xwayland · Ubuntu 20.04 LTS (focal) 2:1.20.13-1ubuntu1~20.04.5 xwayland 2:1.20.13-1ubuntu1~20.04.5 Dec 13, 2022
xwayland · Ubuntu 22.04.1 LTS (jammy) 2:22.1.1-1ubuntu0.4 xwayland 2:22.1.1-1ubuntu0.4 Dec 13, 2022
xwayland-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.9 xwayland-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.9 Dec 13, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.