CVE-2011-4613
Fixed in a distro release EPSS <1%
The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.
Products: x.org x_server, canonical ubuntu_linux, debian_linux, ubuntu linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | xorg-server | 0 |
| Debian 12 | xorg | 1:7.6+10 |
| Debian 13 | xorg | 1:7.6+10 |
| Debian 14 | xorg | 1:7.6+10 |
| Debian 6.0 | xorg | 1:7.5+8+squeeze1 |
| Wolfi | xorg-server | 0 |