Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:x_server:1.20.4:*:*:*:*:*:*:*

part: a version: 1.20.4 update: *

VendorX.Org (4cd053ee-09df-594a-873d-dbd09ec2f899)
ProductX Server (886aecb6-f1b2-5d3d-bfbf-bfb474c3b23f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xserver-xorg-core purl2cpe 2026-06-01 10:14:02.411659
pkg:deb/ubuntu/xserver-xorg-core purl2cpe 2026-06-01 10:14:02.411660
pkg:github/freedesktop/xorg-xserver purl2cpe 2026-06-01 10:14:02.411662
pkg:rpm/opensuse/xserver-xorg-core purl2cpe 2026-06-01 10:14:02.411664

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4283 vulnerable 2026-06-08 05:51:37.121781 Details available
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-14T18:13:03.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46344 vulnerable 2026-06-08 05:50:38.668202 Details available
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-02-13T16:33:49.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46343 vulnerable 2026-06-08 05:50:38.667378 Details available
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-22T15:14:18.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46342 vulnerable 2026-06-08 05:50:38.666333 Details available
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-22T15:21:21.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46341 vulnerable 2026-06-08 05:50:38.665492 Details available
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-22T15:53:42.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46340 vulnerable 2026-06-08 05:50:38.661476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.