The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2373-1 advisory.

  - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry     function due to improper validation of the request length. (CVE-2022-2319)

  - A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of     ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data,     which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to     escalate privileges and execute arbitrary code in the context of root. (CVE-2022-2320)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5905 advisory.

  - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry     function due to improper validation of the request length. (CVE-2022-2319)

  - A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of     ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data,     which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to     escalate privileges and execute arbitrary code in the context of root. (CVE-2022-2320)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5905-1 advisory.

  - xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)

  - xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension     (CVE-2022-2320)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1856 advisory.

    A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry     function due to improper validation of the request length. (CVE-2022-2319)

    A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of     ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data,     which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to     escalate privileges and execute arbitrary code in the context of root. (CVE-2022-2320)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7583 advisory.

  - xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)

  - xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension     (CVE-2022-2320)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8222 advisory.

    Xwayland is an X server for running X clients under Wayland.

    Security Fix(es):

    * xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)

    * xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension     (CVE-2022-2320)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:8222 advisory.

  - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry     function due to improper validation of the request length. (CVE-2022-2319)

  - A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of     ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data,     which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to     escalate privileges and execute arbitrary code in the context of root. (CVE-2022-2320)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
163069	SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2022:2373-1)	Nessus	SuSE Local Security Checks	7/13/2022	7/13/2023	high
163847	CentOS 7 : xorg-x11-server (RHSA-2022:5905)	Nessus	CentOS Local Security Checks	8/4/2022	10/9/2024	high
164010	Scientific Linux Security Update : xorg-x11-server on SL7.x i686/x86_64 (2022:5905)	Nessus	Scientific Linux Local Security Checks	8/10/2022	12/7/2022	high
165997	Amazon Linux 2 : xorg-x11-server (ALAS-2022-1856)	Nessus	Amazon Linux Local Security Checks	10/11/2022	12/11/2024	high
167164	CentOS 8 : xorg-x11-server and xorg-x11-server-Xwayland (CESA-2022:7583)	Nessus	CentOS Local Security Checks	11/9/2022	11/24/2022	high
167626	RHEL 9 : xorg-x11-server-Xwayland (RHSA-2022:8222)	Nessus	Red Hat Local Security Checks	11/16/2022	11/7/2024	high
168000	AlmaLinux 9 : xorg-x11-server-Xwayland (ALSA-2022:8222)	Nessus	Alma Linux Local Security Checks	11/19/2022	11/24/2022	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high