CVE catalog

CVE-2023-0494

xwayland: CVE-2023-0494

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.90% · Oct 22, 2026

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxwaylandsid2:24.1.14-1fixed
Debianxwaylandforky2:24.1.14-1fixed
Debianxwaylandtrixie2:24.1.6-1fixed
Debianxwaylandbookworm2:22.1.9-1fixed
Debianxorg-serversid2:21.1.25-2fixed
Debianxorg-serverforky2:21.1.25-2fixed
Debianxorg-servertrixie2:21.1.16-1.3+deb13u3fixed
Debianxorg-servertrixie-security2:21.1.16-1.3+deb13u4fixed
Debianxorg-serverbookworm2:21.1.7-3+deb12u12fixed
Debianxorg-serverbookworm-security2:21.1.7-3+deb12u13fixed
Ubuntuxorg-serverpro2:1.17.2-1ubuntu9vulnerable
Ubuntuxorg-serverpro2:1.17.2-1ubuntu10vulnerable
Ubuntuxorg-serverpro2:1.17.3-2ubuntu1vulnerable
Ubuntuxorg-serverpro2:1.17.3-2ubuntu2vulnerable
Ubuntuxorg-serverpro2:1.17.3-2ubuntu3vulnerable
Ubuntuxorg-serverpro2:1.17.3-2ubuntu4vulnerable
Ubuntuxorg-serverpro2:1.18.1-1ubuntu3vulnerable
Ubuntuxorg-serverpro2:1.18.1-1ubuntu4vulnerable
Ubuntuxorg-serverpro2:1.18.3-1ubuntu1vulnerable
Ubuntuxorg-serverpro2:1.18.3-1ubuntu2vulnerable
Ubuntuxorg-serverpro2:1.18.3-1ubuntu2.2vulnerable
Ubuntuxorg-serverpro2:1.18.3-1ubuntu2.3vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.1vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.2vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.3vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.4vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.6vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.7vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.8vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.9vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.10vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.11vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.12vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.12+esm1vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.12+esm2vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.12+esm4vulnerable
Ubuntuxorg-serverpro2:1.18.4-0ubuntu0.12+esm5fixed
Ubuntuxorg-server-hwe-16.04pro2:1.18.4-1ubuntu6.1~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.18.4-1ubuntu6.1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.5-0ubuntu2~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.5vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm4fixed
Ubuntuxorg-server18.042:1.19.5-0ubuntu2vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu1vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu2vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu3vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.1vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.2vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.3vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.4vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.5vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.6vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.7vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.8vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.9vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.10vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.11vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.12vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.13vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.14fixed
Ubuntuxorg-server-hwe-18.0418.042:1.20.1-3ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.4-1ubuntu3~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.5+git20191008-0ubuntu1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.2vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.3vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.4vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.5vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.6vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.7vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.8vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.9vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.10fixed
Ubuntuxorg-server20.042:1.20.5+git20191008-0ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.6-1ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.7-2ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.7-2ubuntu2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.1vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.3vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.4vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.6vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.1~20.04.1vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.2~20.04.1vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.2~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.11-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.3vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.4vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.5vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.6fixed
Ubuntuxorg-server22.042:1.20.13-1ubuntu1vulnerable
Ubuntuxorg-server22.042:1.20.13-1ubuntu2vulnerable
Ubuntuxorg-server22.042:1.20.14-1ubuntu1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.3vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.4vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.5vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.6vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.7fixed
Ubuntuxwayland22.042:21.1.2-0ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.3-1vulnerable
Ubuntuxwayland22.042:21.1.3-1ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.4-1vulnerable
Ubuntuxwayland22.042:22.1.0-1vulnerable
Ubuntuxwayland22.042:22.1.1-1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.2vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.3vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.4vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.5fixed
Ubuntuxorg-server18.042:1.19.5-0ubuntu2vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu1vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu2vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu3vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.1vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.2vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.3vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.4vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.5vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.6vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.7vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.8vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.9vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.10vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.11vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.12vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.13vulnerable
Ubuntuxorg-server18.042:1.19.6-1ubuntu4.14fixed
Ubuntuxorg-server-hwe-18.0418.042:1.20.1-3ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.4-1ubuntu3~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.5+git20191008-0ubuntu1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.2vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.3vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.4vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.5vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.6vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.7vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.8vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.9vulnerable
Ubuntuxorg-server-hwe-18.0418.042:1.20.8-2ubuntu2.2~18.04.10fixed
Ubuntuxorg-server20.042:1.20.5+git20191008-0ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.6-1ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.7-2ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.7-2ubuntu2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.1vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.3vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.4vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.6vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.1~20.04.1vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.2~20.04.1vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.2~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.11-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.3vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.4vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.5vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.6fixed
Ubuntuxorg-server22.042:1.20.13-1ubuntu1vulnerable
Ubuntuxorg-server22.042:1.20.13-1ubuntu2vulnerable
Ubuntuxorg-server22.042:1.20.14-1ubuntu1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.3vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.4vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.5vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.6vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.7fixed
Ubuntuxwayland22.042:21.1.2-0ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.3-1vulnerable
Ubuntuxwayland22.042:21.1.3-1ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.4-1vulnerable
Ubuntuxwayland22.042:22.1.0-1vulnerable
Ubuntuxwayland22.042:22.1.1-1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.2vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.3vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.4vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.5fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp2-ltss1.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp3-espos1.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp3-ltss1.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise real time 15 sp31.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp2-ltss1.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp3-ltss1.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp21.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp31.20.3-150200.22.5.66.1fixed
Susexorg-x11-servermanager proxy 4.21.20.3-150200.22.5.66.1fixed
Susexorg-x11-servermanager retail branch server 4.21.20.3-150200.22.5.66.1fixed
Susexorg-x11-servermanager server 4.21.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise workstation extension 15 sp41.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverenterprise storage 71.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverenterprise storage 7.11.20.3-150200.22.5.66.1fixed
Opensusexorg-x11-serverleap 15.41.20.3-150200.22.5.66.1fixed
Susexorg-x11-serverlinux enterprise server 12 sp2-bcl7.6_1.18.3-76.60.1fixed
Susexorg-x11-serveropenstack cloud 91.19.6-4.42.1fixed
Susexorg-x11-serveropenstack cloud crowbar 91.19.6-4.42.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 12 sp41.19.6-4.42.1fixed
Susexorg-x11-serverlinux enterprise server 12 sp4-ltss1.19.6-4.42.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp1-ltss1.20.3-150100.14.5.36.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp1-ltss1.20.3-150100.14.5.36.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp11.20.3-150100.14.5.36.1fixed
Susexorg-x11-serverlinux enterprise module for basesystem 15 sp41.20.3-150400.38.16.1fixed
Susexorg-x11-serverlinux enterprise module for development tools 15 sp41.20.3-150400.38.16.1fixed
Opensusexorg-x11-serverleap 15.41.20.3-150400.38.16.1fixed
Opensusexorg-x11-servertumbleweed21.1.7-1.1fixed
Susexwaylandlinux enterprise workstation extension 15 sp421.1.4-150400.3.9.1fixed
Opensusexwaylandleap 15.421.1.4-150400.3.9.1fixed
Susexorg-x11-serverlinux enterprise software development kit 12 sp51.19.6-10.43.1fixed
Susexorg-x11-serverlinux enterprise server 12 sp51.19.6-10.43.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 12 sp51.19.6-10.43.1fixed
Opensusexwaylandtumbleweed22.1.8-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxwaylandsourcesid2:22.1.8-1not yet assignedNot reportedNot reported
Debianxwaylandsourceforky2:22.1.8-1not yet assignedNot reportedNot reported
Debianxwaylandsourcetrixie2:22.1.8-1not yet assignedNot reportedNot reported
Debianxwaylandsourcebookworm2:22.1.8-1not yet assignedNot reportedNot reported
Debianxorg-serversourcesid2:21.1.7-1not yet assignedNot reported[1030777]
Debianxorg-serversourceforky2:21.1.7-1not yet assignedNot reported[1030777]
Debianxorg-serversourcetrixie2:21.1.7-1not yet assignedNot reported[1030777]
Debianxorg-serversourcebookworm2:21.1.7-1not yet assignedNot reported[1030777]
Ubuntuxorg-serverdebpro2:1.18.4-0ubuntu0.12+esm5Not reportedUBUNTU-CVE-2023-0494Not reported
Ubuntuxorg-server-hwe-16.04debpro2:1.19.6-1ubuntu4.1~16.04.6+esm4Not reportedUBUNTU-CVE-2023-0494Not reported
Ubuntuxorg-serverdeb18.042:1.19.6-1ubuntu4.14Not reportedUBUNTU-CVE-2023-0494Not reported
Ubuntuxorg-server-hwe-18.04deb18.042:1.20.8-2ubuntu2.2~18.04.10Not reportedUBUNTU-CVE-2023-0494Not reported
Ubuntuxorg-serverdeb20.042:1.20.13-1ubuntu1~20.04.6Not reportedUBUNTU-CVE-2023-0494Not reported
Ubuntuxorg-serverdeb22.042:21.1.3-2ubuntu2.7Not reportedUBUNTU-CVE-2023-0494Not reported
Ubuntuxwaylanddeb22.042:22.1.1-1ubuntu0.5Not reportedUBUNTU-CVE-2023-0494Not reported
Ubuntuxorg-serverdeb18.042:1.19.6-1ubuntu4.14Not reportedUSN-5846-1Not reported
Ubuntuxorg-server-hwe-18.04deb18.042:1.20.8-2ubuntu2.2~18.04.10Not reportedUSN-5846-1Not reported
Ubuntuxorg-serverdeb20.042:1.20.13-1ubuntu1~20.04.6Not reportedUSN-5846-1Not reported
Ubuntuxorg-serverdeb22.042:21.1.3-2ubuntu2.7Not reportedUSN-5846-1Not reported
Ubuntuxwaylanddeb22.042:22.1.1-1ubuntu0.5Not reportedUSN-5846-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp2-ltss1.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp3-espos1.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp3-ltss1.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise real time 15 sp31.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp2-ltss1.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp3-ltss1.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp21.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp31.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmmanager proxy 4.21.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmmanager retail branch server 4.21.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmmanager server 4.21.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise workstation extension 15 sp41.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmenterprise storage 71.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmenterprise storage 7.11.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Opensusexorg-x11-serverrpmleap 15.41.20.3-150200.22.5.66.1Not reportedSUSE-SU-2023:0285-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 12 sp2-bcl7.6_1.18.3-76.60.1Not reportedSUSE-SU-2023:0284-1Not reported
Susexorg-x11-serverrpmopenstack cloud 91.19.6-4.42.1Not reportedSUSE-SU-2023:0282-1Not reported
Susexorg-x11-serverrpmopenstack cloud crowbar 91.19.6-4.42.1Not reportedSUSE-SU-2023:0282-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 12 sp41.19.6-4.42.1Not reportedSUSE-SU-2023:0282-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 12 sp4-ltss1.19.6-4.42.1Not reportedSUSE-SU-2023:0282-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp1-ltss1.20.3-150100.14.5.36.1Not reportedSUSE-SU-2023:0287-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp1-ltss1.20.3-150100.14.5.36.1Not reportedSUSE-SU-2023:0287-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp11.20.3-150100.14.5.36.1Not reportedSUSE-SU-2023:0287-1Not reported
Susexorg-x11-serverrpmlinux enterprise module for basesystem 15 sp41.20.3-150400.38.16.1Not reportedSUSE-SU-2023:0288-1Not reported
Susexorg-x11-serverrpmlinux enterprise module for development tools 15 sp41.20.3-150400.38.16.1Not reportedSUSE-SU-2023:0288-1Not reported
Opensusexorg-x11-serverrpmleap 15.41.20.3-150400.38.16.1Not reportedSUSE-SU-2023:0288-1Not reported
Opensusexorg-x11-serverrpmtumbleweed21.1.7-1.1Not reportedOPENSUSE-SU-2024:12664-1Not reported
Susexwaylandrpmlinux enterprise workstation extension 15 sp421.1.4-150400.3.9.1Not reportedSUSE-SU-2023:0289-1Not reported
Opensusexwaylandrpmleap 15.421.1.4-150400.3.9.1Not reportedSUSE-SU-2023:0289-1Not reported
Susexorg-x11-serverrpmlinux enterprise software development kit 12 sp51.19.6-10.43.1Not reportedSUSE-SU-2023:0286-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 12 sp51.19.6-10.43.1Not reportedSUSE-SU-2023:0286-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 12 sp51.19.6-10.43.1Not reportedSUSE-SU-2023:0286-1Not reported
Opensusexwaylandrpmtumbleweed22.1.8-1.1Not reportedOPENSUSE-SU-2024:12665-1Not reported

[Debian bug #1030777]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [xnest]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

  • [xorg-server-source]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

  • [xserver-common]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

  • [xserver-xephyr]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

  • [xserver-xorg-core]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

  • [xserver-xorg-dev]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

  • [xserver-xorg-legacy]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

  • [xvfb]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · bookworm; dsa · xorg-server · debian · 12

  • [xwayland]Unknown
    Details (2)

    • 2:22.1.9-1 · amd64 · bookworm

      Fixed · Fixed: 2:22.1.8-1

      dsa · xwayland · debian · bookworm; dsa · xwayland · debian · 12

    • 2:22.1.9-1 · arm64 · bookworm

      Fixed · Fixed: 2:22.1.8-1

      dsa · xwayland · debian · bookworm; dsa · xwayland · debian · 12

[Debian 13 (Trixie)]

  • [xnest]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

  • [xorg-server-source]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · all · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

  • [xserver-common]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · all · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

  • [xserver-xephyr]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

  • [xserver-xorg-core]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

  • [xserver-xorg-dev]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

  • [xserver-xorg-legacy]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

  • [xvfb]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.7-1

      dsa · xorg-server · debian · 13

  • [xwayland]Unknown
    Details (2)

    • 2:24.1.6-1 · amd64 · trixie

      Fixed · Fixed: 2:22.1.8-1

      dsa · xwayland · debian · 13

    • 2:24.1.6-1 · arm64 · trixie

      Fixed · Fixed: 2:22.1.8-1

      dsa · xwayland · debian · 13

[openSUSE Tumbleweed]

  • [xorg-x11-server]Unknown

    Source package: [xorg-x11-server]

    Details (1)

    • 21.1.24-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 21.1.7-1.1

      dsa · xorg-x11-server · opensuse · tumbleweed

  • [xorg-x11-server-extra]Unknown

    Source package: [xorg-x11-server]

    Details (1)

    • 21.1.24-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 21.1.7-1.1

      Version impact unknown

      dsa · xorg-x11-server · opensuse · tumbleweed

Next results

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]