X.Org X11 Server XTestFakeInput Request stack-based overflow

Summaryinfo

A vulnerability was found in X.Org X11 Server. It has been classified as critical. This issue affects some unknown processing of the component XTestFakeInput Request Handler. This manipulation causes stack-based overflow. This vulnerability is tracked as CVE-2022-46340. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability classified as critical was found in X.Org X11 Server (Windowing System Software) (unknown version). Affected by this vulnerability is an unknown code block of the component XTestFakeInput Request Handler. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.

The weakness was disclosed 12/15/2022. The advisory is shared at access.redhat.com. This vulnerability is known as CVE-2022-46340 since 11/30/2022. Neither technical details nor an exploit are publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 211333 (Fedora 37 : xorg-x11-server-Xwayland (2022-721a78b7e5)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (211333). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Windowing System Software

Vendor

• X.Org

Name

• X11 Server

License

• open-source

Website

• Vendor: https://www.x.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion