CVE-2023-5380CWE-416

Xorg-x11-server: use-after-free bug in destroywindow

Medium · published October 25, 2023

CVSS v3.1
4.7
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00694 · 52.4th percentile
Weakness
CWE-416 · Use After Free
Published
2023-10-25T19:46Z
EPSS history
Timeline
  • 25 OCT 19:46Z
    Xorg-x11-server: use-after-free bug in destroywindow
    cvelistv5