Skip to content
OpenAdvisories
Medium USN-5740-1 2 CVEs

xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04, xwayland vulnerabilities

Published Nov 23, 2022 · Updated Jun 29, 2026

Summary

It was discovered that X.Org X Server incorrectly handled certain inputs.
An attacker could use these issues to cause the server to crash, resulting
in a denial of service, or possibly execute arbitrary code.

Fixed packages 8

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS xorg-server 2:1.19.6-1ubuntu4.12
Ubuntu · 18.04 LTS 18.04:LTS xorg-server-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.8
Ubuntu · 20.04 LTS 20.04:LTS xorg-server 2:1.20.13-1ubuntu1~20.04.4
Ubuntu · 22.04 LTS 22.04:LTS xorg-server 2:21.1.3-2ubuntu2.3
Ubuntu · 22.04 LTS 22.04:LTS xwayland 2:22.1.1-1ubuntu0.3
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS xorg-server 2:1.15.1-0ubuntu2.11+esm6
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS xorg-server 2:1.18.4-0ubuntu0.12+esm4
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS xorg-server-hwe-16.04 2:1.19.6-1ubuntu4.1~16.04.6+esm3

Vulnerabilities 2

  • Medium 5.5

    X.org Server xkb.c _GetCountedString buffer overflow

    A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The asso…

  • Low 3.5

    X.org Server xkb.c ProcXkbGetKbdByName memory leak

    A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue…

References

  • report
    https://ubuntu.com/security/CVE-2022-3550
  • report
    https://ubuntu.com/security/CVE-2022-3551