CVE-2023-0494 - Vulnerability Details

Vendors	Products
Fedoraproject	Fedora
Redhat	Enterprise Linux Enterprise Linux Aus Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux For Ibm Z Systems Enterprise Linux For Ibm Z Systems Eus Enterprise Linux For Power Big Endian Enterprise Linux For Power Little Endian Enterprise Linux For Power Little Endian Eus Enterprise Linux For Scientific Computing Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Enterprise Linux Server Tus Enterprise Linux Server Update Services For Sap Solutions Enterprise Linux Server Workstation Rhel Aus Rhel E4s Rhel Eus Rhel Tus
X.org	X Server

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 7
tigervnc-0:1.8.0-24.el7_9	cpe:/o:redhat:enterprise_linux:7	RHSA-2023:0675	2023-02-08T00:00:00Z
xorg-x11-server-0:1.20.4-22.el7_9	cpe:/o:redhat:enterprise_linux:7	RHSA-2023:0675	2023-02-08T00:00:00Z
Red Hat Enterprise Linux 8
tigervnc-0:1.12.0-9.el8_7.1	cpe:/a:redhat:enterprise_linux:8	RHSA-2023:0662	2023-02-08T00:00:00Z
xorg-x11-server-Xwayland-0:21.1.3-10.el8	cpe:/a:redhat:enterprise_linux:8	RHSA-2023:2805	2023-05-16T00:00:00Z
xorg-x11-server-0:1.20.11-15.el8	cpe:/a:redhat:enterprise_linux:8	RHSA-2023:2806	2023-05-16T00:00:00Z
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
tigervnc-0:1.9.0-16.el8_1.1	cpe:/a:redhat:rhel_e4s:8.1	RHSA-2023:0665	2023-02-08T00:00:00Z
Red Hat Enterprise Linux 8.2 Advanced Update Support
tigervnc-0:1.9.0-15.el8_2.1	cpe:/a:redhat:rhel_aus:8.2	RHSA-2023:0671	2023-02-08T00:00:00Z
Red Hat Enterprise Linux 8.2 Telecommunications Update Service
tigervnc-0:1.9.0-15.el8_2.1	cpe:/a:redhat:rhel_tus:8.2	RHSA-2023:0671	2023-02-08T00:00:00Z
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
tigervnc-0:1.9.0-15.el8_2.1	cpe:/a:redhat:rhel_e4s:8.2	RHSA-2023:0671	2023-02-08T00:00:00Z
Red Hat Enterprise Linux 8.4 Extended Update Support
tigervnc-0:1.11.0-8.el8_4.1	cpe:/a:redhat:rhel_eus:8.4	RHSA-2023:0664	2023-02-08T00:00:00Z
Red Hat Enterprise Linux 8.6 Extended Update Support
tigervnc-0:1.12.0-6.el8_6.1	cpe:/a:redhat:rhel_eus:8.6	RHSA-2023:0663	2023-02-08T00:00:00Z
Red Hat Enterprise Linux 9
tigervnc-0:1.12.0-5.el9_1.1	cpe:/a:redhat:enterprise_linux:9	RHSA-2023:0622	2023-02-07T00:00:00Z
xorg-x11-server-0:1.20.11-17.el9	cpe:/a:redhat:enterprise_linux:9	RHSA-2023:2248	2023-05-09T00:00:00Z
xorg-x11-server-Xwayland-0:21.1.3-7.el9	cpe:/a:redhat:enterprise_linux:9	RHSA-2023:2249	2023-05-09T00:00:00Z
Red Hat Enterprise Linux 9.0 Extended Update Support
tigervnc-0:1.11.0-22.el9_0.1	cpe:/a:redhat:rhel_eus:9.0	RHSA-2023:0623	2023-02-07T00:00:00Z

Link	Providers
https://bugzilla.redhat.com/show_bug.cgi?id=2165995
https://github.com/advisories/GHSA-5v6x-2hpj-c37x
https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec
https://lists.x.org/archives/xorg-announce/2023-February/003320.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0494
https://security.gentoo.org/glsa/202305-30
https://www.cve.org/CVERecord?id=CVE-2023-0494

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-0494", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "dateUpdated": "2025-02-24T17:43:00.816Z", "dateReserved": "2023-01-25T00:00:00.000Z", "datePublished": "2023-03-27T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2023-05-30T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions."}], "affected": [{"vendor": "n/a", "product": "xorg-x11-server", "versions": [{"version": "xorg-server 21.1.7", "status": "affected"}]}], "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"}, {"url": "https://lists.x.org/archives/xorg-announce/2023-February/003320.html"}, {"url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec"}, {"name": "GLSA-202305-30", "tags": ["vendor-advisory"], "url": "https://security.gentoo.org/glsa/202305-30"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-416", "cweId": "CWE-416"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:10:56.201Z"}, "title": "CVE Program Container", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995", "tags": ["x_transferred"]}, {"url": "https://lists.x.org/archives/xorg-announce/2023-February/003320.html", "tags": ["x_transferred"]}, {"url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec", "tags": ["x_transferred"]}, {"name": "GLSA-202305-30", "tags": ["vendor-advisory", "x_transferred"], "url": "https://security.gentoo.org/glsa/202305-30"}]}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-02-24T17:41:52.537361Z", "id": "CVE-2023-0494", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-24T17:43:00.816Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-0494 (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

assignerShortName : redhat (string)

dateUpdated : 2025-02-24T17:43:00.816Z (string)

dateReserved : 2023-01-25T00:00:00.000Z (string)

datePublished : 2023-03-27T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2023-05-30T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : xorg-x11-server (string)

versions : [ »

0 : { »

version : xorg-server 21.1.7 (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2165995 (string)

}

1 : { »

url : https://lists.x.org/archives/xorg-announce/2023-February/003320.html (string)

}

2 : { »

url : https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec (string)

}

3 : { »

name : GLSA-202305-30 (string)

tags : [ »

0 : vendor-advisory (string)

]

url : https://security.gentoo.org/glsa/202305-30 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-416 (string)

cweId : CWE-416 (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T05:10:56.201Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2165995 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://lists.x.org/archives/xorg-announce/2023-February/003320.html (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

name : GLSA-202305-30 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

url : https://security.gentoo.org/glsa/202305-30 (string)

}

]

}

1 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-02-24T17:41:52.537361Z (string)

id : CVE-2023-0494 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-24T17:43:00.816Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995", "tags": ["x_transferred"]}, {"url": "https://lists.x.org/archives/xorg-announce/2023-February/003320.html", "tags": ["x_transferred"]}, {"url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec", "tags": ["x_transferred"]}, {"url": "https://security.gentoo.org/glsa/202305-30", "name": "GLSA-202305-30", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:10:56.201Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-0494", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-24T17:41:52.537361Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-24T17:41:59.698Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "xorg-x11-server", "versions": [{"status": "affected", "version": "xorg-server 21.1.7"}]}], "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"}, {"url": "https://lists.x.org/archives/xorg-announce/2023-February/003320.html"}, {"url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec"}, {"url": "https://security.gentoo.org/glsa/202305-30", "name": "GLSA-202305-30", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2023-05-30T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2023-0494", "state": "PUBLISHED", "dateUpdated": "2025-02-24T17:43:00.816Z", "dateReserved": "2023-01-25T00:00:00.000Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2023-03-27T00:00:00.000Z", "assignerShortName": "redhat"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2165995 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://lists.x.org/archives/xorg-announce/2023-February/003320.html (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://security.gentoo.org/glsa/202305-30 (string)

name : GLSA-202305-30 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T05:10:56.201Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-0494 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-24T17:41:52.537361Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-24T17:41:59.698Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : n/a (string)

product : xorg-x11-server (string)

versions : [ »

0 : { »

status : affected (string)

version : xorg-server 21.1.7 (string)

}

]

}

]

references : [ »

0 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2165995 (string)

}

1 : { »

url : https://lists.x.org/archives/xorg-announce/2023-February/003320.html (string)

}

2 : { »

url : https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec (string)

}

3 : { »

url : https://security.gentoo.org/glsa/202305-30 (string)

name : GLSA-202305-30 (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-416 (string)

description : CWE-416 (string)

}

]

}

]

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2023-05-30T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2023-0494 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-24T17:43:00.816Z (string)

dateReserved : 2023-01-25T00:00:00.000Z (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

datePublished : 2023-03-27T00:00:00.000Z (string)

assignerShortName : redhat (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "8B7D5030-1EC6-4BAD-B66D-859A906E3D38", "versionEndExcluding": "21.1.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*", "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*", "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "EF30E57A-97EA-4A44-8404-6AE4F058B44D", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*", "matchCriteriaId": "4D5F4FA7-E5C5-4C23-BDA8-36A36972E4F4", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*", "matchCriteriaId": "5CA4F12A-5BC5-4D75-8F20-80D8BB2C5BF2", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*", "matchCriteriaId": "0E3F09B5-569F-4C58-9FCA-3C0953D107B5", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*", "matchCriteriaId": "6C3741B8-851F-475D-B428-523F4F722350", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "4DDA3E5A-8754-4C48-9A27-E2415F8A6000", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "566507B6-AC95-47F7-A3FB-C6F414E45F51", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "87C21FE1-EA5C-498F-9C6C-D05F91A88217", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*", "matchCriteriaId": "8C9BD9AE-46FC-4609-8D99-A3CFE91D58D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6:*:*:*:*:*:*:*", "matchCriteriaId": "9EF5C4AC-CA69-41E3-AD93-7AC21931374A", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "1CDCFF34-6F1D-45A1-BE37-6A0E17B04801", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "47811209-5CE5-4375-8391-B0A7F6A0E420", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "35EEDB95-DCD1-4FED-9BBB-877B2062410C", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*", "matchCriteriaId": "983533DD-3970-4A37-9A9C-582BD48AA1E5", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6:*:*:*:*:*:*:*", "matchCriteriaId": "729C515E-1DD3-466D-A50B-AFE058FFC94A", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "37CE1DC7-72C5-483C-8921-0B462C8284D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "6897676D-53F9-45B3-B27F-7FF9A4C58D33", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "4DF2B9A2-8CA6-4EDF-9975-07265E363ED2", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "7DA6A5AF-2EBE-4ED9-B312-DCD9D150D031", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*", "matchCriteriaId": "22D095ED-9247-4133-A133-73B7668565E4", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*", "matchCriteriaId": "871A5C26-DB7B-4870-A5B2-5DD24C90B4A7", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "492DF629-16B8-4882-822D-A6897B03DD30", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "B09ACF2D-D83F-4A86-8185-9569605D8EE1", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*", "matchCriteriaId": "AC10D919-57FD-4725-B8D2-39ECB476902F", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*", "matchCriteriaId": "1272DF03-7674-4BD4-8E64-94004B195448", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "3921C1CF-A16D-4727-99AD-03EFFA7C91CA", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_workstation:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "DC7808D1-B267-4361-8187-5AB70B64179A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions."}], "id": "CVE-2023-0494", "lastModified": "2025-02-24T18:15:16.550", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-03-27T21:15:10.193", "references": [{"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec"}, {"source": "secalert@redhat.com", "tags": ["Mailing List", "Vendor Advisory"], "url": "https://lists.x.org/archives/xorg-announce/2023-February/003320.html"}, {"source": "secalert@redhat.com", "url": "https://security.gentoo.org/glsa/202305-30"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Vendor Advisory"], "url": "https://lists.x.org/archives/xorg-announce/2023-February/003320.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/202305-30"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "secalert@redhat.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-416"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B7D5030-1EC6-4BAD-B66D-859A906E3D38 (string)

versionEndExcluding : 21.1.7 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* (string)

matchCriteriaId : 5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* (string)

matchCriteriaId : E30D0E6F-4AE8-4284-8716-991DFA48CC5D (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* (string)

matchCriteriaId : F4CFF558-3C47-480D-A2F0-BABF26042943 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux:8.1:*:*:*:*:*:*:* (string)

matchCriteriaId : EF30E57A-97EA-4A44-8404-6AE4F058B44D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7F6FB57C-2BC7-487C-96DD-132683AEB35D (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D5F4FA7-E5C5-4C23-BDA8-36A36972E4F4 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 5CA4F12A-5BC5-4D75-8F20-80D8BB2C5BF2 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 33C068A4-3780-4EAB-A937-6082DF847564 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 0E3F09B5-569F-4C58-9FCA-3C0953D107B5 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C3741B8-851F-475D-B428-523F4F722350 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 4DDA3E5A-8754-4C48-9A27-E2415F8A6000 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 566507B6-AC95-47F7-A3FB-C6F414E45F51 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 87C21FE1-EA5C-498F-9C6C-D05F91A88217 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 8C9BD9AE-46FC-4609-8D99-A3CFE91D58D1 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 9EF5C4AC-CA69-41E3-AD93-7AC21931374A (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 1CDCFF34-6F1D-45A1-BE37-6A0E17B04801 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 47811209-5CE5-4375-8391-B0A7F6A0E420 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 35EEDB95-DCD1-4FED-9BBB-877B2062410C (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 983533DD-3970-4A37-9A9C-582BD48AA1E5 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 729C515E-1DD3-466D-A50B-AFE058FFC94A (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 37CE1DC7-72C5-483C-8921-0B462C8284D1 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 51EF4996-72F4-4FA4-814F-F5991E7A8318 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 6897676D-53F9-45B3-B27F-7FF9A4C58D33 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 4DF2B9A2-8CA6-4EDF-9975-07265E363ED2 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 7DA6A5AF-2EBE-4ED9-B312-DCD9D150D031 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 22D095ED-9247-4133-A133-73B7668565E4 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 871A5C26-DB7B-4870-A5B2-5DD24C90B4A7 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 492DF629-16B8-4882-822D-A6897B03DD30 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* (string)

matchCriteriaId : B09ACF2D-D83F-4A86-8185-9569605D8EE1 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : AC10D919-57FD-4725-B8D2-39ECB476902F (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 1272DF03-7674-4BD4-8E64-94004B195448 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 3921C1CF-A16D-4727-99AD-03EFFA7C91CA (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:o:redhat:enterprise_linux_server_workstation:7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DC7808D1-B267-4361-8187-5AB70B64179A (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions. (string)

}

]

id : CVE-2023-0494 (string)

lastModified : 2025-02-24T18:15:16.550 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2023-03-27T21:15:10.193 (string)

references : [ »

0 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Third Party Advisory (string)

]

url : https://bugzilla.redhat.com/show_bug.cgi?id=2165995 (string)

}

1 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Patch (string)

]

url : https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec (string)

}

2 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Mailing List (string)

1 : Vendor Advisory (string)

]

url : https://lists.x.org/archives/xorg-announce/2023-February/003320.html (string)

}

3 : { »

source : secalert@redhat.com (string)

url : https://security.gentoo.org/glsa/202305-30 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Third Party Advisory (string)

]

url : https://bugzilla.redhat.com/show_bug.cgi?id=2165995 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec (string)

}

6 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Vendor Advisory (string)

]

url : https://lists.x.org/archives/xorg-announce/2023-February/003320.html (string)

}

7 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://security.gentoo.org/glsa/202305-30 (string)

}

]

sourceIdentifier : secalert@redhat.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

]

source : secalert@redhat.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"affected_release": [{"advisory": "RHSA-2023:0675", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "tigervnc-0:1.8.0-24.el7_9", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:0675", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "xorg-x11-server-0:1.20.4-22.el7_9", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:0662", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "tigervnc-0:1.12.0-9.el8_7.1", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:2805", "cpe": "cpe:/a:redhat:enterprise_linux:8", "impact": "moderate", "package": "xorg-x11-server-Xwayland-0:21.1.3-10.el8", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-05-16T00:00:00Z"}, {"advisory": "RHSA-2023:2806", "cpe": "cpe:/a:redhat:enterprise_linux:8", "impact": "moderate", "package": "xorg-x11-server-0:1.20.11-15.el8", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-05-16T00:00:00Z"}, {"advisory": "RHSA-2023:0665", "cpe": "cpe:/a:redhat:rhel_e4s:8.1", "package": "tigervnc-0:1.9.0-16.el8_1.1", "product_name": "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:0671", "cpe": "cpe:/a:redhat:rhel_aus:8.2", "package": "tigervnc-0:1.9.0-15.el8_2.1", "product_name": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:0671", "cpe": "cpe:/a:redhat:rhel_tus:8.2", "package": "tigervnc-0:1.9.0-15.el8_2.1", "product_name": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:0671", "cpe": "cpe:/a:redhat:rhel_e4s:8.2", "package": "tigervnc-0:1.9.0-15.el8_2.1", "product_name": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:0664", "cpe": "cpe:/a:redhat:rhel_eus:8.4", "package": "tigervnc-0:1.11.0-8.el8_4.1", "product_name": "Red Hat Enterprise Linux 8.4 Extended Update Support", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:0663", "cpe": "cpe:/a:redhat:rhel_eus:8.6", "package": "tigervnc-0:1.12.0-6.el8_6.1", "product_name": "Red Hat Enterprise Linux 8.6 Extended Update Support", "release_date": "2023-02-08T00:00:00Z"}, {"advisory": "RHSA-2023:0622", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "tigervnc-0:1.12.0-5.el9_1.1", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-02-07T00:00:00Z"}, {"advisory": "RHSA-2023:2248", "cpe": "cpe:/a:redhat:enterprise_linux:9", "impact": "moderate", "package": "xorg-x11-server-0:1.20.11-17.el9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-05-09T00:00:00Z"}, {"advisory": "RHSA-2023:2249", "cpe": "cpe:/a:redhat:enterprise_linux:9", "impact": "moderate", "package": "xorg-x11-server-Xwayland-0:21.1.3-7.el9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-05-09T00:00:00Z"}, {"advisory": "RHSA-2023:0623", "cpe": "cpe:/a:redhat:rhel_eus:9.0", "package": "tigervnc-0:1.11.0-22.el9_0.1", "product_name": "Red Hat Enterprise Linux 9.0 Extended Update Support", "release_date": "2023-02-07T00:00:00Z"}], "bugzilla": {"description": "xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation", "id": "2165995", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165995"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.8", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-416", "details": ["A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.", "A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions."], "name": "CVE-2023-0494", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "tigervnc", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "xorg-x11-server", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2023-02-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-0494\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-0494\nhttps://github.com/advisories/GHSA-5v6x-2hpj-c37x"], "statement": "Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with Moderate severity.", "threat_severity": "Important"}

{

affected_release : [ »

0 : { »

advisory : RHSA-2023:0675 (string)

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

package : tigervnc-0:1.8.0-24.el7_9 (string)

product_name : Red Hat Enterprise Linux 7 (string)

release_date : 2023-02-08T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2023:0675 (string)

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

package : xorg-x11-server-0:1.20.4-22.el7_9 (string)

product_name : Red Hat Enterprise Linux 7 (string)

release_date : 2023-02-08T00:00:00Z (string)

}

2 : { »

advisory : RHSA-2023:0662 (string)

cpe : cpe:/a:redhat:enterprise_linux:8 (string)

package : tigervnc-0:1.12.0-9.el8_7.1 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2023-02-08T00:00:00Z (string)

}

3 : { »

advisory : RHSA-2023:2805 (string)

cpe : cpe:/a:redhat:enterprise_linux:8 (string)

impact : moderate (string)

package : xorg-x11-server-Xwayland-0:21.1.3-10.el8 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2023-05-16T00:00:00Z (string)

}

4 : { »

advisory : RHSA-2023:2806 (string)

cpe : cpe:/a:redhat:enterprise_linux:8 (string)

impact : moderate (string)

package : xorg-x11-server-0:1.20.11-15.el8 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2023-05-16T00:00:00Z (string)

}

5 : { »

advisory : RHSA-2023:0665 (string)

cpe : cpe:/a:redhat:rhel_e4s:8.1 (string)

package : tigervnc-0:1.9.0-16.el8_1.1 (string)

product_name : Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions (string)

release_date : 2023-02-08T00:00:00Z (string)

}

6 : { »

advisory : RHSA-2023:0671 (string)

cpe : cpe:/a:redhat:rhel_aus:8.2 (string)

package : tigervnc-0:1.9.0-15.el8_2.1 (string)

product_name : Red Hat Enterprise Linux 8.2 Advanced Update Support (string)

release_date : 2023-02-08T00:00:00Z (string)

}

7 : { »

advisory : RHSA-2023:0671 (string)

cpe : cpe:/a:redhat:rhel_tus:8.2 (string)

package : tigervnc-0:1.9.0-15.el8_2.1 (string)

product_name : Red Hat Enterprise Linux 8.2 Telecommunications Update Service (string)

release_date : 2023-02-08T00:00:00Z (string)

}

8 : { »

advisory : RHSA-2023:0671 (string)

cpe : cpe:/a:redhat:rhel_e4s:8.2 (string)

package : tigervnc-0:1.9.0-15.el8_2.1 (string)

product_name : Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions (string)

release_date : 2023-02-08T00:00:00Z (string)

}

9 : { »

advisory : RHSA-2023:0664 (string)

cpe : cpe:/a:redhat:rhel_eus:8.4 (string)

package : tigervnc-0:1.11.0-8.el8_4.1 (string)

product_name : Red Hat Enterprise Linux 8.4 Extended Update Support (string)

release_date : 2023-02-08T00:00:00Z (string)

}

10 : { »

advisory : RHSA-2023:0663 (string)

cpe : cpe:/a:redhat:rhel_eus:8.6 (string)

package : tigervnc-0:1.12.0-6.el8_6.1 (string)

product_name : Red Hat Enterprise Linux 8.6 Extended Update Support (string)

release_date : 2023-02-08T00:00:00Z (string)

}

11 : { »

advisory : RHSA-2023:0622 (string)

cpe : cpe:/a:redhat:enterprise_linux:9 (string)

package : tigervnc-0:1.12.0-5.el9_1.1 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2023-02-07T00:00:00Z (string)

}

12 : { »

advisory : RHSA-2023:2248 (string)

cpe : cpe:/a:redhat:enterprise_linux:9 (string)

impact : moderate (string)

package : xorg-x11-server-0:1.20.11-17.el9 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2023-05-09T00:00:00Z (string)

}

13 : { »

advisory : RHSA-2023:2249 (string)

cpe : cpe:/a:redhat:enterprise_linux:9 (string)

impact : moderate (string)

package : xorg-x11-server-Xwayland-0:21.1.3-7.el9 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2023-05-09T00:00:00Z (string)

}

14 : { »

advisory : RHSA-2023:0623 (string)

cpe : cpe:/a:redhat:rhel_eus:9.0 (string)

package : tigervnc-0:1.11.0-22.el9_0.1 (string)

product_name : Red Hat Enterprise Linux 9.0 Extended Update Support (string)

release_date : 2023-02-07T00:00:00Z (string)

}

]

bugzilla : { »

description : xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (string)

id : 2165995 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2165995 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 7.8 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

status : verified (string)

}

cwe : CWE-416 (string)

details : [ »

0 : A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions. (string)

1 : A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions. (string)

]

name : CVE-2023-0494 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : tigervnc (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : xorg-x11-server (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

]

public_date : 2023-02-07T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2023-0494 https://nvd.nist.gov/vuln/detail/CVE-2023-0494 https://github.com/advisories/GHSA-5v6x-2hpj-c37x (string)

]

statement : Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore Red Hat Enterprise Linux 8 and 9 have been rated with Moderate severity. (string)

threat_severity : Important (string)

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object