Vulnerabilities > CVE-2023-5380 - Use After Free vulnerability in multiple products

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.

Vulnerable Configurations

Part	Description	Count
Application	X.Org X.Org Xwayland - X.Org Xwayland 21.0.99.901 X.Org Xwayland 21.0.99.902 X.Org Xwayland 21.1.0 X.Org Xwayland 21.1.1 X.Org Xwayland 21.1.2 X.Org Xwayland 21.1.3 X.Org Xwayland 21.1.4 X.Org Xwayland 22.0.99.901 X.Org Xwayland 22.0.99.902 X.Org Xwayland 22.1.0 X.Org Xwayland 22.1.1 X.Org Xwayland 22.1.2 X.Org Xwayland 22.1.3 X.Org Xwayland 22.1.4 X.Org Xwayland 22.1.5 X.Org Xwayland 22.1.6 X.Org Xwayland 22.1.7 X.Org Xwayland 22.1.8 X.Org Xwayland 22.1.9 X.Org Xwayland 23.0.99.901 X.Org Xwayland 23.0.99.902 X.Org Xwayland 23.1.0 X.Org Xwayland 23.1.1 X.Org Xwayland 23.1.2 X.Org Xwayland 23.1.99.901 X.Org Xwayland 23.1.99.902 X.Org Xwayland 23.2.0 X.Org Xwayland 23.2.1 X.Org X Server - X.Org X Server 1.0.1 X.Org X Server 1.0.2 X.Org X Server 1.0.99.2 X.Org X Server 1.0.99.901 X.Org X Server 1.0.99.902 X.Org X Server 1.0.99.903 X.Org X Server 1.1.0 X.Org X Server 1.1.1 X.Org X Server 1.1.99.901 X.Org X Server 1.1.99.902 X.Org X Server 1.1.99.903 X.Org X Server 1.2.0 X.Org X Server 1.2.99.0 X.Org X Server 1.2.99.901 X.Org X Server 1.2.99.902 X.Org X Server 1.2.99.903 X.Org X Server 1.2.99.904 X.Org X Server 1.2.99.905 X.Org X Server 1.3.0.0 X.Org X Server 1.3.99.0 X.Org X Server 1.3.99.2 X.Org X Server 1.4 X.Org X Server 1.4.0.90 X.Org X Server 1.4.1 X.Org X Server 1.4.2 X.Org X Server 1.4.99.901 X.Org X Server 1.4.99.902 X.Org X Server 1.4.99.904 X.Org X Server 1.4.99.905 X.Org X Server 1.4.99.906 X.Org X Server 1.5.0 X.Org X Server 1.5.1 X.Org X Server 1.5.2 X.Org X Server 1.5.3 X.Org X Server 1.5.99.1 X.Org X Server 1.5.99.2 X.Org X Server 1.5.99.3 X.Org X Server 1.5.99.901 X.Org X Server 1.5.99.902 X.Org X Server 1.5.99.903 X.Org X Server 1.6.0 X.Org X Server 1.6.1 X.Org X Server 1.6.1.901 X.Org X Server 1.6.1.902 X.Org X Server 1.6.2 X.Org X Server 1.6.2.901 X.Org X Server 1.6.3 X.Org X Server 1.6.3.901 X.Org X Server 1.6.4 X.Org X Server 1.6.4.901 X.Org X Server 1.6.5 X.Org X Server 1.6.99.900 X.Org X Server 1.6.99.901 X.Org X Server 1.6.99.902 X.Org X Server 1.6.99.903 X.Org X Server 1.7.0 X.Org X Server 1.7.0.901 X.Org X Server 1.7.0.902 X.Org X Server 1.7.1 X.Org X Server 1.7.1.901 X.Org X Server 1.7.1.902 X.Org X Server 1.7.2 X.Org X Server 1.7.3 X.Org X Server 1.7.3.901 X.Org X Server 1.7.3.902 X.Org X Server 1.7.4 X.Org X Server 1.7.4.901 X.Org X Server 1.7.4.902 X.Org X Server 1.7.5 X.Org X Server 1.7.5.901 X.Org X Server 1.7.5.902 X.Org X Server 1.7.6 X.Org X Server 1.7.6.901 X.Org X Server 1.7.6.902 X.Org X Server 1.7.7 X.Org X Server 1.7.99.1 X.Org X Server 1.7.99.2 X.Org X Server 1.7.99.901 X.Org X Server 1.7.99.902 X.Org X Server 1.8.0 X.Org X Server 1.8.0.901 X.Org X Server 1.8.0.902 X.Org X Server 1.8.1 X.Org X Server 1.8.1.901 X.Org X Server 1.8.1.902 X.Org X Server 1.8.2 X.Org X Server 1.8.99.901 X.Org X Server 1.8.99.902 X.Org X Server 1.8.99.903 X.Org X Server 1.8.99.904 X.Org X Server 1.8.99.905 X.Org X Server 1.8.99.906 X.Org X Server 1.9.0 X.Org X Server 1.9.0.901 X.Org X Server 1.9.0.902 X.Org X Server 1.9.1 X.Org X Server 1.9.2 X.Org X Server 1.9.2.901 X.Org X Server 1.9.2.902 X.Org X Server 1.9.3 X.Org X Server 1.9.3.901 X.Org X Server 1.9.3.902 X.Org X Server 1.9.4 X.Org X Server 1.9.4.901 X.Org X Server 1.9.5 X.Org X Server 1.9.99.901 X.Org X Server 1.9.99.902 X.Org X Server 1.9.99.903 X.Org X Server 1.10.0 X.Org X Server 1.10.0.901 X.Org X Server 1.10.0.902 X.Org X Server 1.10.1.901 X.Org X Server 1.10.1.902 X.Org X Server 1.10.2 X.Org X Server 1.10.2.901 X.Org X Server 1.10.2.902 X.Org X Server 1.10.3 X.Org X Server 1.10.3.901 X.Org X Server 1.10.3.902 X.Org X Server 1.10.4 X.Org X Server 1.10.6 X.Org X Server 1.10.99.901 X.Org X Server 1.10.99.902 X.Org X Server 1.11.0 X.Org X Server 1.11.1 X.Org X Server 1.11.1.901 X.Org X Server 1.11.1.902 X.Org X Server 1.11.2 X.Org X Server 1.11.2.901 X.Org X Server 1.11.2.902 X.Org X Server 1.11.3 X.Org X Server 1.11.3.901 X.Org X Server 1.11.3.902 X.Org X Server 1.11.4 X.Org X Server 1.11.99.1 X.Org X Server 1.11.99.2 X.Org X Server 1.11.99.901 X.Org X Server 1.11.99.902 X.Org X Server 1.11.99.903 X.Org X Server 1.12.0 X.Org X Server 1.12.0.901 X.Org X Server 1.12.0.902 X.Org X Server 1.12.1 X.Org X Server 1.12.1.901 X.Org X Server 1.12.1.902 X.Org X Server 1.12.2 X.Org X Server 1.12.2.901 X.Org X Server 1.12.2.902 X.Org X Server 1.12.3 X.Org X Server 1.12.3.901 X.Org X Server 1.12.3.902 X.Org X Server 1.12.4 X.Org X Server 1.12.99.901 X.Org X Server 1.12.99.903 X.Org X Server 1.12.99.904 X.Org X Server 1.12.99.905 X.Org X Server 1.13.0 X.Org X Server 1.13.0.901 X.Org X Server 1.13.0.902 X.Org X Server 1.13.1 X.Org X Server 1.13.1.901 X.Org X Server 1.13.2 X.Org X Server 1.13.2.901 X.Org X Server 1.13.2.902 X.Org X Server 1.13.3 X.Org X Server 1.13.4 X.Org X Server 1.13.99.901 X.Org X Server 1.14.0 X.Org X Server 1.14.1 X.Org X Server 1.14.1.901 X.Org X Server 1.14.2 X.Org X Server 1.14.2.901 X.Org X Server 1.14.2.902 X.Org X Server 1.14.3 X.Org X Server 1.14.4 X.Org X Server 1.14.4.901 X.Org X Server 1.14.5 X.Org X Server 1.14.6 X.Org X Server 1.14.7 X.Org X Server 1.14.99.1 X.Org X Server 1.14.99.2 X.Org X Server 1.14.99.3 X.Org X Server 1.14.99.901 X.Org X Server 1.14.99.902 X.Org X Server 1.14.99.903 X.Org X Server 1.14.99.904 X.Org X Server 1.14.99.905 X.Org X Server 1.15.0.901 X.Org X Server 1.15.99.901 X.Org X Server 1.15.99.902 X.Org X Server 1.15.99.903 X.Org X Server 1.15.99.904 X.Org X Server 1.16.0 X.Org X Server 1.16.1 X.Org X Server 1.16.1.901 X.Org X Server 1.16.2 X.Org X Server 1.16.2.901 X.Org X Server 1.16.3 X.Org X Server 1.16.4 X.Org X Server 1.16.99.901 X.Org X Server 1.16.99.902 X.Org X Server 1.17.0 X.Org X Server 1.17.1 X.Org X Server 1.17.2 X.Org X Server 1.17.3 X.Org X Server 1.17.4 X.Org X Server 1.17.99.901 X.Org X Server 1.17.99.902 X.Org X Server 1.18.0 X.Org X Server 1.18.1 X.Org X Server 1.18.2 X.Org X Server 1.18.3 X.Org X Server 1.18.4 X.Org X Server 1.18.99.2 X.Org X Server 1.18.99.901 X.Org X Server 1.18.99.902 X.Org X Server 1.19.0 X.Org X Server 1.19.1 X.Org X Server 1.19.2 X.Org X Server 1.19.3 X.Org X Server 1.19.4 X.Org X Server 1.19.5 X.Org X Server 1.19.6 X.Org X Server 1.19.7 X.Org X Server 1.19.99.901 X.Org X Server 1.19.99.902 X.Org X Server 1.19.99.903 X.Org X Server 1.19.99.904 X.Org X Server 1.19.99.905 X.Org X Server 1.20.1 X.Org X Server 1.20.2 X.Org X Server 1.20.3 X.Org X Server 1.20.4 X.Org X Server 1.20.5 X.Org X Server 1.20.6 X.Org X Server 1.20.7 X.Org X Server 1.20.8 X.Org X Server 1.20.9 X.Org X Server 1.20.10 X.Org X Server 1.20.11 X.Org X Server 21.1.0 X.Org X Server 21.1.1	272
OS	Redhat Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0	3
OS	Fedoraproject Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39	3
OS	Debian Debian Debian Linux 11.0 Debian Debian Linux 12.0	2

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References