CVE-2022-46341: High severity x.org xserver vulnerability
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Other sources
CVE-2022-46341/ZDI-CAN-19381: X.Org Server XIPassiveUngrab out-of-bounds access
The handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-46341.
What is the severity of CVE-2022-46341?
CVE-2022-46341 has a severity score of 8.8, which is considered high.
What is the affected software?
The affected software includes X.Org X Server version 1.20.4 and Debian/xorg-server versions 2:1.20.4-1+deb10u9, 2:1.20.11-1+deb11u6, 2:21.1.7-3, 2:21.1.8-1. Xwayland versions 2:22.1.9-1 and 2:23.2.1-1 are also affected.
How can this vulnerability be exploited?
This vulnerability can be exploited by invoking the handler for the XIPassiveUngrab request with a high keycode or button code, causing it to access out-of-bounds memory and potentially leading to local privileges elevation.
Is Redhat Enterprise Linux vulnerable to CVE-2022-46341?
No, Redhat Enterprise Linux versions 6.0, 7.0, 8.0, and 9.0 are not vulnerable to CVE-2022-46341.