NetSight
medium4.7

CVE-2023-5380

A use-after-free flaw was found in the xorg-x11-server.

Impact

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.

Affected products

VendorProductAffected versions
X.OrgX Server
before 21.1.9
X.OrgXwayland
before 23.2.2
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0
FedoraprojectFedora
Versions 37, 38, 39
DebianDebian Linux
Versions 11.0, 12.0

Weakness classification

References