Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:xorg-server:1.20.4:*:*:*:*:*:*:*

part: a version: 1.20.4 update: *

VendorX.Org (4cd053ee-09df-594a-873d-dbd09ec2f899)
ProductXorg Server (d5c5a228-377c-5b85-be9a-ca5da7e1b31e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xserver-xorg-core purl2cpe 2026-06-01 10:14:02.753626
pkg:deb/ubuntu/xserver-xorg-core purl2cpe 2026-06-01 10:14:02.753627
pkg:freedesktop/xorg/xserver purl2cpe 2026-06-01 10:14:02.753629
pkg:github/freedesktop/xorg-xserver purl2cpe 2026-06-01 10:14:02.753630
pkg:rpm/fedora/xorg-x11-server purl2cpe 2026-06-01 10:14:02.753631

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4283 vulnerable 2026-06-03 14:48:35.406826 Details available
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-14T18:13:03.382Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.