{"id":"CVE-2022-46342","state":"PUBLISHED","title":"A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can ","description":"A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se","publishedAt":"2022-12-14T00:00:00.000Z","updatedAt":"2025-04-22T15:21:21.802Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"redhat","products":["n/a xorg-x11-server"],"affected":[{"vendor":"n/a","product":"xorg-x11-server","versions":[{"version":"xorg-x11-server-1.20.4","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=2151757","https://access.redhat.com/security/cve/CVE-2022-46342","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/","https://www.debian.org/security/2022/dsa-5304","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/","https://security.gentoo.org/glsa/202305-30"],"weaknesses":["CWE-416"],"ingestedAt":"2026-10-29T19:50:53.608Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/46xxx/CVE-2022-46342.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-46342","state":"PUBLISHED","datePublished":"2022-12-14T00:00:00.000Z","dateUpdated":"2025-04-22T15:21:21.802Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2022-11-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se"}],"affected":[{"vendor":"n/a","product":"xorg-x11-server","versions":[{"version":"xorg-x11-server-1.20.4","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151757"},{"url":"https://access.redhat.com/security/cve/CVE-2022-46342"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/","name":"FEDORA-2022-c3a65f7c65","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/","name":"FEDORA-2022-721a78b7e5","tags":["vendor-advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5304","name":"DSA-5304","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/","name":"FEDORA-2022-dd3eb7e0a8","tags":["vendor-advisory"]},{"url":"https://security.gentoo.org/glsa/202305-30"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"use-after-free"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2023-05-30T05:08:28.069Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151757","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46342","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/","name":"FEDORA-2022-c3a65f7c65","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/","name":"FEDORA-2022-721a78b7e5","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5304","name":"DSA-5304","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/","name":"FEDORA-2022-dd3eb7e0a8","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202305-30","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T14:31:46.114Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-04-22T15:21:01.030665Z","id":"CVE-2022-46342","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-416","type":"CWE","lang":"en","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-22T15:21:21.802Z"}}]}}}