High severity7.8NVD Advisory· Published Mar 27, 2023· Updated Jun 17, 2026

CVE-2023-0494

Description

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xorg/Xserver
cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*
Range: <21.1.7
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server7 versions
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_workstation:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Desktop
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus3 versions
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems2 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Big Endian
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian3 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Scientific Computing
cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions5 versions
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus3 versions
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Update Services For Sap Solutions
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*
Xorg/Xorgcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
osv-coords48 versions
pkg:rpm/almalinux/tigervnc pkg:rpm/almalinux/tigervnc-icons pkg:rpm/almalinux/tigervnc-license pkg:rpm/almalinux/tigervnc-selinux pkg:rpm/almalinux/tigervnc-server pkg:rpm/almalinux/tigervnc-server-minimal pkg:rpm/almalinux/tigervnc-server-module pkg:rpm/almalinux/xorg-x11-server-Xdmx pkg:rpm/almalinux/xorg-x11-server-Xephyr pkg:rpm/almalinux/xorg-x11-server-Xnest pkg:rpm/almalinux/xorg-x11-server-Xorg pkg:rpm/almalinux/xorg-x11-server-Xvfb pkg:rpm/almalinux/xorg-x11-server-Xwayland pkg:rpm/almalinux/xorg-x11-server-common pkg:rpm/almalinux/xorg-x11-server-devel pkg:rpm/almalinux/xorg-x11-server-source pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/xwayland&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/xwayland&distro=openSUSE%20Tumbleweed pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.2 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/xwayland&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4
< 1.12.0-5.el9_1.1+ 47 more
- (no CPE)range: < 1.12.0-5.el9_1.1
- (no CPE)range: < 1.12.0-5.el9_1.1
- (no CPE)range: < 1.12.0-5.el9_1.1
- (no CPE)range: < 1.12.0-5.el9_1.1
- (no CPE)range: < 1.12.0-5.el9_1.1
- (no CPE)range: < 1.12.0-5.el9_1.1
- (no CPE)range: < 1.12.0-5.el9_1.1
- (no CPE)range: < 1.20.11-17.el9
- (no CPE)range: < 1.20.11-17.el9
- (no CPE)range: < 1.20.11-17.el9
- (no CPE)range: < 1.20.11-17.el9
- (no CPE)range: < 1.20.11-17.el9
- (no CPE)range: < 21.1.3-7.el9
- (no CPE)range: < 1.20.11-17.el9
- (no CPE)range: < 1.20.11-17.el9
- (no CPE)range: < 1.20.11-17.el9
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 21.1.7-1.1
- (no CPE)range: < 21.1.4-150400.3.9.1
- (no CPE)range: < 22.1.8-1.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150100.14.5.36.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150400.38.16.1
- (no CPE)range: < 1.20.3-150400.38.16.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 7.6_1.18.3-76.60.1
- (no CPE)range: < 1.19.6-4.42.1
- (no CPE)range: < 1.19.6-10.43.1
- (no CPE)range: < 1.20.3-150100.14.5.36.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.19.6-4.42.1
- (no CPE)range: < 1.19.6-10.43.1
- (no CPE)range: < 1.20.3-150100.14.5.36.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.19.6-10.43.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.20.3-150200.22.5.66.1
- (no CPE)range: < 1.19.6-4.42.1
- (no CPE)range: < 1.19.6-4.42.1
- (no CPE)range: < 21.1.4-150400.3.9.1

Patches

Vulnerability mechanics

References

gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ecnvdPatch
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
lists.x.org/archives/xorg-announce/2023-February/003320.htmlnvdMailing ListVendor Advisory
security.gentoo.org/glsa/202305-30nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000