MGASA-2023-0131
- Source
- https://advisories.mageia.org/MGASA-2023-0131.html
- Import Source
- https://advisories.mageia.org/MGASA-2023-0131.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2023-0131
- Related
- Published
- 2023-04-11T19:02:20Z
- Modified
- 2023-04-11T17:54:08Z
- Summary
- Updated tigervnc/x11-server packages fix security vulnerability
- Details
-
A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later. (CVE-2023-1393)
- References
-
- https://advisories.mageia.org/MGASA-2023-0131.html
- https://bugs.mageia.org/show_bug.cgi?id=31732
- https://lists.x.org/archives/xorg-announce/2023-March/003374.html
- https://www.debian.org/security/2023/dsa-5380
- https://ubuntu.com/security/notices/USN-5986-1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CB62PUAZRE2ZK6PDX6OZ2WSYXDJGBGTS/
- https://access.redhat.com/errata/RHSA-2023:1592
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / tigervnc
Package
- Name
- tigervnc
- Purl
- pkg:rpm/mageia/tigervnc?distro=mageia-8
Mageia:8 / x11-server
Package
- Name
- x11-server
- Purl
- pkg:rpm/mageia/x11-server?distro=mageia-8