The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0046 advisory.

  - xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free (CVE-2022-4283)

  - xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow (CVE-2022-46340)

  - xorg-x11-server: X.Org Server XIPassiveUngrab out-of-bounds access (CVE-2022-46341)

  - xorg-x11-server: X.Org Server XvdiSelectVideoNotify use-after-free (CVE-2022-46342)

  - xorg-x11-server: X.Org Server ScreenSaverSetAttributes use-after-free (CVE-2022-46343)

  - xorg-x11-server: X.Org Server XIChangeProperty out-of-bounds access (CVE-2022-46344)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CentOS 7 : xorg-x11-server (CESA-2023:0046)

high Nessus Plugin ID 170854

Version 1.0