CVE-2022-46344
Fixed in a distro release EPSS 3%
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Products: x.org x_server, fedoraproject fedora, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | tigervnc | 1.12.0-15.el8_8 |
| AlmaLinux 8 | tigervnc-icons | 1.12.0-15.el8_8 |
| AlmaLinux 8 | tigervnc-license | 1.12.0-15.el8_8 |
| AlmaLinux 8 | tigervnc-selinux | 1.12.0-15.el8_8 |
| AlmaLinux 8 | tigervnc-server | 1.12.0-15.el8_8 |
| AlmaLinux 8 | tigervnc-server-minimal | 1.12.0-15.el8_8 |
| AlmaLinux 8 | tigervnc-server-module | 1.12.0-15.el8_8 |
| AlmaLinux 8 | xorg-x11-server-Xdmx | 1.20.11-15.el8 |
| AlmaLinux 8 | xorg-x11-server-Xephyr | 1.20.11-15.el8 |
| AlmaLinux 8 | xorg-x11-server-Xnest | 1.20.11-15.el8 |
| AlmaLinux 8 | xorg-x11-server-Xorg | 1.20.11-15.el8 |
| AlmaLinux 8 | xorg-x11-server-Xvfb | 1.20.11-15.el8 |
| AlmaLinux 8 | xorg-x11-server-Xwayland | 21.1.3-10.el8 |
| AlmaLinux 8 | xorg-x11-server-common | 1.20.11-15.el8 |
| AlmaLinux 8 | xorg-x11-server-devel | 1.20.11-15.el8 |
| AlmaLinux 8 | xorg-x11-server-source | 1.20.11-15.el8 |
| AlmaLinux 9 | tigervnc | 1.12.0-13.el9_2 |
| AlmaLinux 9 | tigervnc-icons | 1.12.0-13.el9_2 |
| AlmaLinux 9 | tigervnc-license | 1.12.0-13.el9_2 |
| AlmaLinux 9 | tigervnc-selinux | 1.12.0-13.el9_2 |
| AlmaLinux 9 | tigervnc-server | 1.12.0-13.el9_2 |
| AlmaLinux 9 | tigervnc-server-minimal | 1.12.0-13.el9_2 |
| AlmaLinux 9 | tigervnc-server-module | 1.12.0-13.el9_2 |
| AlmaLinux 9 | xorg-x11-server-Xdmx | 1.20.11-17.el9 |
| AlmaLinux 9 | xorg-x11-server-Xephyr | 1.20.11-17.el9 |
| AlmaLinux 9 | xorg-x11-server-Xnest | 1.20.11-17.el9 |
| AlmaLinux 9 | xorg-x11-server-Xorg | 1.20.11-17.el9 |
| AlmaLinux 9 | xorg-x11-server-Xvfb | 1.20.11-17.el9 |
| AlmaLinux 9 | xorg-x11-server-Xwayland | 21.1.3-7.el9 |
| AlmaLinux 9 | xorg-x11-server-common | 1.20.11-17.el9 |
| AlmaLinux 9 | xorg-x11-server-devel | 1.20.11-17.el9 |
| AlmaLinux 9 | xorg-x11-server-source | 1.20.11-17.el9 |
| Amazon Linux 2 | xorg-x11-server-Xdmx | 1.20.4-22.amzn2 |
| Amazon Linux 2 | xorg-x11-server-Xephyr | 1.20.4-22.amzn2 |
| Amazon Linux 2 | xorg-x11-server-Xnest | 1.20.4-22.amzn2 |
| Amazon Linux 2 | xorg-x11-server-Xorg | 1.20.4-22.amzn2 |
| Amazon Linux 2 | xorg-x11-server-Xvfb | 1.20.4-22.amzn2 |
| Amazon Linux 2 | xorg-x11-server-Xwayland | 1.20.4-22.amzn2 |
| Amazon Linux 2 | xorg-x11-server-common | 1.20.4-22.amzn2 |
| Amazon Linux 2 | xorg-x11-server-devel | 1.20.4-22.amzn2 |
| Amazon Linux 2 | xorg-x11-server-source | 1.20.4-22.amzn2 |
| Amazon Linux 2023 | xorg-x11-server-Xdmx | 1.20.14-12.amzn2023.0.2 |
| Amazon Linux 2023 | xorg-x11-server-Xephyr | 1.20.14-12.amzn2023.0.2 |
| Amazon Linux 2023 | xorg-x11-server-Xnest | 1.20.14-12.amzn2023.0.2 |
| Amazon Linux 2023 | xorg-x11-server-Xorg | 1.20.14-12.amzn2023.0.2 |
| Amazon Linux 2023 | xorg-x11-server-Xvfb | 1.20.14-12.amzn2023.0.2 |
| Amazon Linux 2023 | xorg-x11-server-common | 1.20.14-12.amzn2023.0.2 |
| Amazon Linux 2023 | xorg-x11-server-devel | 1.20.14-12.amzn2023.0.2 |
| Amazon Linux 2023 | xorg-x11-server-source | 1.20.14-12.amzn2023.0.2 |
| Debian 10 | xorg-server | 2:1.20.4-1+deb10u7 |
| Debian 11 | xorg-server | 2:1.20.11-1+deb11u4 |
| Debian 12 | xorg-server | 2:21.1.5-1 |
| Debian 12 | xwayland | 2:22.1.6-1 |
| Debian 13 | xorg-server | 2:21.1.5-1 |
| Debian 13 | xwayland | 2:22.1.6-1 |
| Debian 14 | xorg-server | 2:21.1.5-1 |
| Debian 14 | xwayland | 2:22.1.6-1 |
| Red Hat Enterprise Linux 7 | tigervnc | 0:1.8.0-23.el7_9 |
| Red Hat Enterprise Linux 7 | tigervnc-debuginfo | 0:1.8.0-23.el7_9 |
| Red Hat Enterprise Linux 7 | tigervnc-icons | 0:1.8.0-23.el7_9 |
| Red Hat Enterprise Linux 7 | tigervnc-license | 0:1.8.0-23.el7_9 |
| Red Hat Enterprise Linux 7 | tigervnc-server | 0:1.8.0-23.el7_9 |
| Red Hat Enterprise Linux 7 | tigervnc-server-applet | 0:1.8.0-23.el7_9 |
| Red Hat Enterprise Linux 7 | tigervnc-server-minimal | 0:1.8.0-23.el7_9 |
| Red Hat Enterprise Linux 7 | tigervnc-server-module | 0:1.8.0-23.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xdmx | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xephyr | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xnest | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xorg | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xvfb | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xwayland | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-common | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-debuginfo | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-devel | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-source | 0:1.20.4-21.el7_9 |
| Red Hat Enterprise Linux 8 | tigervnc | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-debuginfo | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-debugsource | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-icons | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-license | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-selinux | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-server | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-debuginfo | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-minimal | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-minimal-debuginfo | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-module | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-module-debuginfo | 0:1.12.0-15.el8_8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xdmx | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xdmx-debuginfo | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xephyr | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xephyr-debuginfo | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xnest | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xnest-debuginfo | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xorg | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xorg-debuginfo | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xvfb | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xvfb-debuginfo | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland | 0:21.1.3-10.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland-debuginfo | 0:21.1.3-10.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland-debugsource | 0:21.1.3-10.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-common | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-debuginfo | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-debugsource | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-devel | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-source | 0:1.20.11-15.el8 |
| Red Hat Enterprise Linux 9 | tigervnc | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-debuginfo | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-debugsource | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-icons | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-license | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-selinux | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-server | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-server-debuginfo | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-server-minimal | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-server-minimal-debuginfo | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-server-module | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | tigervnc-server-module-debuginfo | 0:1.12.0-13.el9_2 |
| Red Hat Enterprise Linux 9 | xorg-x11-server | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xdmx | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xdmx-debuginfo | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xephyr | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xephyr-debuginfo | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xnest | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xnest-debuginfo | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xorg | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xorg-debuginfo | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xvfb | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xvfb-debuginfo | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xwayland | 0:21.1.3-7.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xwayland-debuginfo | 0:21.1.3-7.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xwayland-debugsource | 0:21.1.3-7.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-common | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-debuginfo | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-debugsource | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-devel | 0:1.20.11-17.el9 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-source | 0:1.20.11-17.el9 |
| Red Hat rhel els 6 | tigervnc | 0:1.1.0-25.el6_10.13 |
| Red Hat rhel els 6 | tigervnc-debuginfo | 0:1.1.0-25.el6_10.13 |
| Red Hat rhel els 6 | tigervnc-server | 0:1.1.0-25.el6_10.13 |
| Red Hat rhel els 6 | tigervnc-server-applet | 0:1.1.0-25.el6_10.13 |
| Red Hat rhel els 6 | tigervnc-server-module | 0:1.1.0-25.el6_10.13 |
| SUSE Enterprise Storage 6 | xorg-x11-server | 1.20.3-150100.14.5.33.1 |
| SUSE Enterprise Storage 7 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | xorg-x11-server | 1.20.3-150100.14.5.33.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | xorg-x11-server | 1.20.3-150100.14.5.33.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | xorg-x11-server | 1.19.6-150000.8.47.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | xorg-x11-server | 1.19.6-150000.8.47.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | xorg-x11-server | 1.20.3-150400.38.13.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | xorg-x11-server | 1.20.3-150400.38.13.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | xorg-x11-server | 7.6_1.18.3-76.57.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | xorg-x11-server | 7.6_1.18.3-76.57.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | xorg-x11-server | 1.19.6-4.39.1 |
| SUSE Linux Enterprise Server 12 SP5 | xorg-x11-server | 1.19.6-10.40.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | xorg-x11-server | 1.20.3-150100.14.5.33.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | xorg-x11-server | 1.20.3-150100.14.5.33.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise Server 15-LTSS | xorg-x11-server | 1.19.6-150000.8.47.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | xorg-x11-server | 1.19.6-4.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | xorg-x11-server | 1.19.6-10.40.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | xorg-x11-server | 1.19.6-150000.8.47.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | xorg-x11-server | 1.20.3-150100.14.5.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | xorg-x11-server | 1.19.6-10.40.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP3 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP4 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP4 | xwayland | 21.1.4-150400.3.6.1 |
| SUSE Manager Proxy 4.1 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Manager Retail Branch Server 4.1 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE Manager Server 4.1 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| SUSE OpenStack Cloud 9 | xorg-x11-server | 1.19.6-4.39.1 |
| SUSE OpenStack Cloud Crowbar 9 | xorg-x11-server | 1.19.6-4.39.1 |
| Ubuntu 18.04 LTS | xorg-server | 2:1.19.6-1ubuntu4.13 |
| Ubuntu 18.04 LTS | xorg-server-hwe-18.04 | 2:1.20.8-2ubuntu2.2~18.04.9 |
| Ubuntu 20.04 LTS | xorg-server | 2:1.20.13-1ubuntu1~20.04.5 |
| Ubuntu 22.04 LTS | xorg-server | 2:21.1.3-2ubuntu2.5 |
| Ubuntu 22.04 LTS | xwayland | 2:22.1.1-1ubuntu0.4 |
| Ubuntu Pro 14.04 LTS | xorg-server | 2:1.15.1-0ubuntu2.11+esm7 |
| Ubuntu Pro 16.04 LTS | xorg-server | 2:1.18.4-0ubuntu0.12+esm5 |
| Ubuntu Pro 16.04 LTS | xorg-server-hwe-16.04 | 2:1.19.6-1ubuntu4.1~16.04.6+esm4 |
| openSUSE Leap 15.3 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| openSUSE Leap 15.4 | xorg-x11-server | 1.20.3-150400.38.13.1 |
| openSUSE Leap 15.4 | xorg-x11-server | 1.20.3-150200.22.5.63.1 |
| openSUSE Leap 15.4 | xwayland | 21.1.4-150400.3.6.1 |
| openSUSE Tumbleweed | xorg-x11-server | 21.1.4-6.1 |
| openSUSE Tumbleweed | xwayland | 22.1.5-2.1 |