← Database

CVE-2023-0494

HIGH CVSS: 7.8 Published: 2023-03-27 Modified: 2026-06-17

Description

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.

Affected Platforms

Redhat Enterprise Linux AusRedhat Enterprise Linux Server TusRedhat Enterprise Linux Server Update Services For Sap SolutionsRedhat Enterprise LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux For Power Big EndianRedhat Enterprise Linux For Power Little EndianRedhat Enterprise Linux Server WorkstationRedhat Enterprise Linux DesktopRedhat Enterprise Linux Server

Weakness Type

CWE-416, CWE-416

References