CVE-2023-5380: Xorg-x11-server: use-after-free bug in destroywindow
A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.
Other sources
This vulnerability requires a legacy multi-screen setup with multiple protocol screens ("Zaphod"). If the pointer is warped from one screen to the root window of the other screen, the enter/leave code may retain a reference to the previous pointer window. Destroying this window leaves that reference in place, other windows may then trigger a use-after-free bug when they are destroyed.
This bug can be triggered only under very specific conditions, in particular it requires an XWarpPointer call and that the pointer never enters a client window on the other screen.
Reference: https://lists.x.org/archives/xorg-announce/2023-October/003430.html
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/xorg-serverto a version that resolves this vulnerability.Fixed in 2:1.15.1-0ubuntu2.11+ - Upgrade
Upgrade
ubuntu/xorg-serverto a version that resolves this vulnerability.Fixed in 2:1.18.4-0ubuntu0.12+ - Upgrade
Upgrade
ubuntu/xorg-serverto a version that resolves this vulnerability.Fixed in 2:1.19.6-1ubuntu4.15+ - Upgrade
Upgrade
ubuntu/xorg-serverto a version that resolves this vulnerability.Fixed in 21.1.9 - Upgrade
Upgrade
ubuntu/xorg-serverto a version that resolves this vulnerability.Fixed in 2:1.20.13-1ubuntu1~20.04.9 - Upgrade
Upgrade
ubuntu/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.4-2ubuntu1.7~22.04.2 - Upgrade
Upgrade
ubuntu/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.7-1ubuntu3.1 - Upgrade
Upgrade
ubuntu/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.7-3ubuntu2.1 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:1.20.4-1+deb10u12Fixed in 2:1.20.11-1+deb11u10Fixed in 2:21.1.7-3+deb12u2Fixed in 2:21.1.7-3+deb12u4Fixed in 2:21.1.10-1 - Upgrade
Upgrade
redhat/xorg-serverto a version that resolves this vulnerability.Fixed in 21.1.9 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:1.20.4-1+deb10u12 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:1.20.11-1+deb11u10 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.7-3+deb12u2 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.7-3+deb12u4 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.10-1
Event History
Frequently Asked Questions
What is CVE-2023-5380?
CVE-2023-5380 is a use-after-free vulnerability in the xorg-x11-server that may lead to an X server crash in a specific configuration.
How does CVE-2023-5380 affect the xorg-x11-server?
CVE-2023-5380 affects the xorg-x11-server by causing a use-after-free flaw that can result in an X server crash.
What is the severity of CVE-2023-5380?
The severity of CVE-2023-5380 is medium with a CVSS score of 5.1.
How can I fix CVE-2023-5380?
To fix CVE-2023-5380, update the xorg-x11-server package to version 21.1.9 or higher.
Where can I find more information about CVE-2023-5380?
You can find more information about CVE-2023-5380 at the following references: [link1](https://access.redhat.com/security/cve/CVE-2023-5380), [link2](https://bugzilla.redhat.com/show_bug.cgi?id=2244736), [link3](https://lists.x.org/archives/xorg-announce/2023-October/003430.html).