Free Trial

CVE-2022-4283 : X.ORG X11 SERVER XKBGETKBDBYNAME REQUEST XKBCOPYNAMES USE AFTER FREE

Description

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

References

https://access.redhat.com/security/cve/CVE-2022-4283

https://bugzilla.redhat.com/show_bug.cgi?id=2151761

For More Information

MITRE

Common Vulnerabilityies and Exposures

CVE-2022-4283 : X.ORG X11 SERVER XKBGETKBDBYNAME REQUEST XKBCOPYNAMES USE AFTER FREE
CVE-2022-4283 : X.ORG X11 SERVER XKBGETKBDBYNAME REQUEST XKBCOPYNAMES USE AFTER FREE

Contact us to get started

CVE-2023-0556 : CONTENTSTUDIO PLUGIN UP TO 1.2.5 ON WORDPRESS CSTU_GET_METADATA AUTHORIZATION

CVE-2023-0556 : CONTENTSTUDIO PLUGIN UP TO 1.2.5 ON WORDPRESS CSTU_GET_METADATA AUTHORIZATION

Description The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions

Learn more
CVE-2022-48108 : D-LINK DIR-878 1.30B08 SUBNETMASK COMMAND INJECTION

CVE-2022-48108 : D-LINK DIR-878 1.30B08 SUBNETMASK COMMAND INJECTION

Description D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to

Learn more
CVE-2022-47767 : SOLAR-LOG GATEWAY UP TO 4.2.7/5.1.1 SLCORE BACKDOOR

CVE-2022-47767 : SOLAR-LOG GATEWAY UP TO 4.2.7/5.1.1 SLCORE BACKDOOR

Description A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker.

Learn more