CVE-2023-5574
Xorg-x11-server: use-after-free bug in damagedestroy
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Xorg-x11-server: use-after-free bug in damagedestroy
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-04
EUVDEUVD-2023-57870
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
EUVD-2023-57870- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-04
GitHub AdvisoriesGHSA-79x6-r5x5-fvqw
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very...
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
GHSA-79x6-r5x5-fvqw- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
NVD
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-04
OSVALPINE-CVE-2023-5574
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
ALPINE-CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-31703
CVE-2023-5574 affecting package xorg-x11-server for versions less than 1.20.10-10
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
AZL-31703- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 23 moreShow less
OSVAZL-45255
CVE-2023-5574 affecting package xorg-x11-server 1.20.10-6
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
AZL-45255- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
OSVBELL-CVE-2023-5574
- Record
BELL-CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-5574
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
DEBIAN-CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
OSVOESA-2024-2261
xorg-x11-server security update
X.Org X11 X server
Security Fix(es):
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.(CVE-2023-5574)
- Record
OESA-2024-2261- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-2314
xorg-x11-server security update
X.Org X11 X server
Security Fix(es):
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.(CVE-2023-5574)
- Record
OESA-2024-2314- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-2315
xorg-x11-server security update
X.Org X11 X server
Security Fix(es):
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.(CVE-2023-5574)
- Record
OESA-2024-2315- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-2316
xorg-x11-server security update
X.Org X11 X server
Security Fix(es):
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.(CVE-2023-5574)
- Record
OESA-2024-2316- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-2317
xorg-x11-server security update
X.Org X11 X server
Security Fix(es):
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.(CVE-2023-5574)
- Record
OESA-2024-2317- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2298
Red Hat Security Advisory: tigervnc security update
- Record
RHSA-2024:2298- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2023-5574
CVE-2023-5574 in xorg-server - Patched by Root
Root has patched CVE-2023-5574 in the xorg-server package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2023-5574
CVE-2023-5574 in xorg-server - Patched by Root
Root has patched CVE-2023-5574 in the xorg-server package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-5574
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.
- Record
UBUNTU-CVE-2023-5574- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2024:2298 No score
Important: tigervnc security update
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.
Security Fix(es):
- xorg-x11-server: Use-after-free bug in DamageDestroy (CVE-2023-5574)
- xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2298- Updated
- 2026-11-02
OSVMGASA-2023-0307 No score
Updated x11-server packages fix security vulnerabilities
The updated packages fix security vulnerabilities:
OOB write in XIChangeDeviceProperty/RRChangeOutputProperty. (CVE-2023-5367)
Use-after-free bug in DestroyWindow. (CVE-2023-5380)
Use-after-free bug in DamageDestroy. (CVE-2023-5574)
- Record
MGASA-2023-0307- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13361-1 No score
xorg-x11-server-21.1.9-1.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.9-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13361-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13467-1 No score
xwayland-23.2.2-2.1 on GA media
These are all security issues fixed in the xwayland-23.2.2-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13467-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4269-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
- CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
- CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
- Record
SUSE-SU-2023:4269-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4272-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
- CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
- CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
- Record
SUSE-SU-2023:4272-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4292-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
- CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
- CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
- Record
SUSE-SU-2023:4292-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4293-1 No score
Security update for xwayland
This update for xwayland fixes the following issues:
- CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
- CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
- Record
SUSE-SU-2023:4293-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4306-1 No score
Security update for xwayland
This update for xwayland fixes the following issues:
- CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
- CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
- Record
SUSE-SU-2023:4306-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4338-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
- CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
- CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
- Record
SUSE-SU-2023:4338-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xorg-serverAlpine:v3.18 |
before 21.1.9-r0 | 21.1.9-r0 |
xorg-serverAlpine:v3.19 |
before 21.1.9-r0 | 21.1.9-r0 |
xorg-serverAlpine:v3.20 |
before 21.1.9-r0 | 21.1.9-r0 |
xorg-serverAlpine:v3.21 |
before 21.1.9-r0 | 21.1.9-r0 |
xorg-serverAlpine:v3.22 |
before 21.1.9-r0 | 21.1.9-r0 |
xorg-serverAlpine:v3.23 |
before 21.1.9-r0 | 21.1.9-r0 |
xorg-serverAlpine:v3.24 |
before 21.1.9-r0 | 21.1.9-r0 |
tigervncAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.13.1-8.el9 | 1.13.1-8.el9 |
tigervnc-iconsAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.13.1-8.el9 | 1.13.1-8.el9 |
tigervnc-licenseAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.13.1-8.el9 | 1.13.1-8.el9 |
Show 74 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tigervnc-selinuxAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.13.1-8.el9 | 1.13.1-8.el9 |
tigervnc-serverAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.13.1-8.el9 | 1.13.1-8.el9 |
tigervnc-server-minimalAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.13.1-8.el9 | 1.13.1-8.el9 |
tigervnc-server-moduleAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.13.1-8.el9 | 1.13.1-8.el9 |
xorg-x11-serverAzure Linux:2 |
before 1.20.10-10 | 1.20.10-10 |
xorg-x11-serverAzure Linux:3 |
through 1.20.10-6 | None known |
xorg-serverAlpaquita:23 |
21.1.4-r1 up to 21.1.12-r0 | 21.1.12-r0 |
xorg-serverAlpaquita:stream |
21.1.4-r1 up to 21.1.9-r0 | 21.1.9-r0 |
xorg-serverDebian:12 |
All versions, plus listed versions 2:21.1.10-12:21.1.11-12:21.1.11-22:21.1.11-32:21.1.12-1 Show 39 moreShow less2:21.1.13-12:21.1.13-22:21.1.13-32:21.1.13-3.12:21.1.14-12:21.1.14-22:21.1.15-12:21.1.15-22:21.1.15-32:21.1.16-12:21.1.16-1.12:21.1.16-1.22:21.1.16-1.32:21.1.18-12:21.1.18-22:21.1.20-12:21.1.21-12:21.1.22-12:21.1.23-12:21.1.24-12:21.1.25-12:21.1.25-22:21.1.7-32:21.1.7-3+deb12u12:21.1.7-3+deb12u102:21.1.7-3+deb12u112:21.1.7-3+deb12u122:21.1.7-3+deb12u132:21.1.7-3+deb12u22:21.1.7-3+deb12u32:21.1.7-3+deb12u42:21.1.7-3+deb12u52:21.1.7-3+deb12u62:21.1.7-3+deb12u72:21.1.7-3+deb12u82:21.1.7-3+deb12u92:21.1.8-12:21.1.9-12:21.1.9-1+hurd.1 |
None known |
xorg-serverDebian:13 |
All versions, plus listed versions 2:21.1.16-1.32:21.1.16-1.3+deb13u12:21.1.16-1.3+deb13u22:21.1.16-1.3+deb13u32:21.1.16-1.3+deb13u4 Show 9 moreShow less2:21.1.18-12:21.1.18-22:21.1.20-12:21.1.21-12:21.1.22-12:21.1.23-12:21.1.24-12:21.1.25-12:21.1.25-2 |
None known |
xorg-serverDebian:14 |
All versions, plus listed versions 2:21.1.16-1.32:21.1.18-12:21.1.18-22:21.1.20-12:21.1.21-1 Show 5 moreShow less2:21.1.22-12:21.1.23-12:21.1.24-12:21.1.25-12:21.1.25-2 |
None known |
x11-serverMageia:8 From an advisory covering 3 CVEs |
before 1.20.14-4.4.mga8 | 1.20.14-4.4.mga8 |
x11-serverMageia:9 From an advisory covering 3 CVEs |
before 21.1.8-7.1.mga9 | 21.1.8-7.1.mga9 |
x11-server-xwaylandMageia:9 From an advisory covering 3 CVEs |
before 22.1.9-1.1.mga9 | 22.1.9-1.1.mga9 |
xorg-x11-serveropenEuler:22.03-LTS-SP1 |
before 1.20.11-32.oe2203sp1 | 1.20.11-32.oe2203sp1 |
xorg-x11-serveropenEuler:24.03-LTS |
before 1.20.11-33.oe2403 | 1.20.11-33.oe2403 |
xorg-x11-serveropenEuler:22.03-LTS-SP4 |
before 1.20.11-33.oe2203sp4 | 1.20.11-33.oe2203sp4 |
xorg-x11-serveropenEuler:22.03-LTS-SP3 |
before 1.20.11-33.oe2203sp3 | 1.20.11-33.oe2203sp3 |
xorg-x11-serveropenEuler:20.03-LTS-SP4 |
before 1.20.8-30.oe2003sp4 | 1.20.8-30.oe2003sp4 |
tigervncRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-iconsRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-licenseRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-selinuxRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-serverRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-server-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-server-minimalRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-server-minimal-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-server-moduleRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
tigervnc-server-module-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.13.1-8.el9 | 0:1.13.1-8.el9 |
xorg-serverRoot:Debian:11 |
before 2:1.20.11-1+deb11u18.aikido.13 | 2:1.20.11-1+deb11u18.aikido.13 |
rootio-xorg-serverRoot:Debian:11 |
before 2:1.20.11-1+deb11u18.aikido.13 | 2:1.20.11-1+deb11u18.aikido.13 |
xorg-serverRoot:Debian:12 |
before 2:21.1.7-3+deb12u13.aikido.9 | 2:21.1.7-3+deb12u13.aikido.9 |
rootio-xorg-serverRoot:Debian:12 |
before 2:21.1.7-3+deb12u13.aikido.9 | 2:21.1.7-3+deb12u13.aikido.9 |
xorg-x11-serverSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 1.19.6-10.56.1 | 1.19.6-10.56.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 1.19.6-10.56.1 | 1.19.6-10.56.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 1.19.6-10.56.1 | 1.19.6-10.56.1 |
xorg-x11-serverSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 3 CVEs |
before 21.1.4-150500.7.7.1 | 21.1.4-150500.7.7.1 |
xorg-x11-serverSUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 3 CVEs |
before 21.1.4-150500.7.7.1 | 21.1.4-150500.7.7.1 |
xorg-x11-serveropenSUSE:Leap 15.5 From an advisory covering 3 CVEs |
before 21.1.4-150500.7.7.1 | 21.1.4-150500.7.7.1 |
xorg-x11-serverSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 3 CVEs |
before 1.20.3-150400.38.29.1 | 1.20.3-150400.38.29.1 |
xorg-x11-serverSUSE:Linux Enterprise Module for Development Tools 15 SP4 From an advisory covering 3 CVEs |
before 1.20.3-150400.38.29.1 | 1.20.3-150400.38.29.1 |
xorg-x11-serveropenSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 1.20.3-150400.38.29.1 | 1.20.3-150400.38.29.1 |
xwaylandSUSE:Linux Enterprise Workstation Extension 15 SP4 From an advisory covering 2 CVEs |
before 21.1.4-150400.3.20.1 | 21.1.4-150400.3.20.1 |
xwaylandopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 21.1.4-150400.3.20.1 | 21.1.4-150400.3.20.1 |
xwaylandSUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 2 CVEs |
before 22.1.5-150500.7.5.1 | 22.1.5-150500.7.5.1 |
xwaylandopenSUSE:Leap 15.5 From an advisory covering 2 CVEs |
before 22.1.5-150500.7.5.1 | 22.1.5-150500.7.5.1 |
xorg-x11-serverSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Manager Proxy 4.2 From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Manager Server 4.2 From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Linux Enterprise Workstation Extension 15 SP4 From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serverSUSE:Enterprise Storage 7.1 From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-x11-serveropenSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 1.20.3-150200.22.5.79.1 | 1.20.3-150200.22.5.79.1 |
xorg-serverUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1 Show 30 moreShow less2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.42:1.15.1-0ubuntu2.52:1.15.1-0ubuntu2.62:1.15.1-0ubuntu2.72:1.15.1-0ubuntu2.92:1.15.1-0ubuntu2.102:1.15.1-0ubuntu2.112:1.15.1-0ubuntu2.11+esm22:1.15.1-0ubuntu2.11+esm32:1.15.1-0ubuntu2.11+esm42:1.15.1-0ubuntu2.11+esm52:1.15.1-0ubuntu2.11+esm62:1.15.1-0ubuntu2.11+esm72:1.15.1-0ubuntu2.11+esm82:1.15.1-0ubuntu2.11+esm92:1.15.1-0ubuntu2.11+esm112:1.15.1-0ubuntu2.11+esm12 |
None known |
xorg-serverUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2:1.17.2-1ubuntu92:1.17.2-1ubuntu102:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu3 Show 33 moreShow less2:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu22:1.18.3-1ubuntu2.22:1.18.3-1ubuntu2.32:1.18.4-0ubuntu0.12:1.18.4-0ubuntu0.22:1.18.4-0ubuntu0.32:1.18.4-0ubuntu0.42:1.18.4-0ubuntu0.62:1.18.4-0ubuntu0.72:1.18.4-0ubuntu0.82:1.18.4-0ubuntu0.92:1.18.4-0ubuntu0.102:1.18.4-0ubuntu0.112:1.18.4-0ubuntu0.122:1.18.4-0ubuntu0.12+esm12:1.18.4-0ubuntu0.12+esm22:1.18.4-0ubuntu0.12+esm42:1.18.4-0ubuntu0.12+esm52:1.18.4-0ubuntu0.12+esm62:1.18.4-0ubuntu0.12+esm82:1.18.4-0ubuntu0.12+esm92:1.18.4-0ubuntu0.12+esm102:1.18.4-0ubuntu0.12+esm122:1.18.4-0ubuntu0.12+esm132:1.18.4-0ubuntu0.12+esm142:1.18.4-0ubuntu0.12+esm152:1.18.4-0ubuntu0.12+esm162:1.18.4-0ubuntu0.12+esm172:1.18.4-0ubuntu0.12+esm18 |
None known |
xorg-server-hwe-16.04Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 2:1.18.4-1ubuntu6.1~16.04.12:1.18.4-1ubuntu6.1~16.04.22:1.19.3-1ubuntu1~16.04.22:1.19.3-1ubuntu1~16.04.32:1.19.3-1ubuntu1~16.04.4 Show 17 moreShow less2:1.19.5-0ubuntu2~16.04.12:1.19.6-1ubuntu4~16.04.12:1.19.6-1ubuntu4.1~16.04.12:1.19.6-1ubuntu4.1~16.04.22:1.19.6-1ubuntu4.1~16.04.32:1.19.6-1ubuntu4.1~16.04.42:1.19.6-1ubuntu4.1~16.04.52:1.19.6-1ubuntu4.1~16.04.62:1.19.6-1ubuntu4.1~16.04.6+esm12:1.19.6-1ubuntu4.1~16.04.6+esm32:1.19.6-1ubuntu4.1~16.04.6+esm42:1.19.6-1ubuntu4.1~16.04.6+esm52:1.19.6-1ubuntu4.1~16.04.6+esm62:1.19.6-1ubuntu4.1~16.04.6+esm72:1.19.6-1ubuntu4.1~16.04.6+esm82:1.19.6-1ubuntu4.1~16.04.6+esm92:1.19.6-1ubuntu4.1~16.04.6+esm10 |
None known |
xorg-serverUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu4 Show 26 moreShow less2:1.19.6-1ubuntu4.12:1.19.6-1ubuntu4.22:1.19.6-1ubuntu4.32:1.19.6-1ubuntu4.42:1.19.6-1ubuntu4.52:1.19.6-1ubuntu4.62:1.19.6-1ubuntu4.72:1.19.6-1ubuntu4.82:1.19.6-1ubuntu4.92:1.19.6-1ubuntu4.102:1.19.6-1ubuntu4.112:1.19.6-1ubuntu4.122:1.19.6-1ubuntu4.132:1.19.6-1ubuntu4.142:1.19.6-1ubuntu4.152:1.19.6-1ubuntu4.15+esm12:1.19.6-1ubuntu4.15+esm32:1.19.6-1ubuntu4.15+esm42:1.19.6-1ubuntu4.15+esm52:1.19.6-1ubuntu4.15+esm72:1.19.6-1ubuntu4.15+esm82:1.19.6-1ubuntu4.15+esm92:1.19.6-1ubuntu4.15+esm102:1.19.6-1ubuntu4.15+esm112:1.19.6-1ubuntu4.15+esm122:1.19.6-1ubuntu4.15+esm13 |
None known |
xorg-server-hwe-18.04Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 2:1.20.1-3ubuntu2.1~18.04.12:1.20.4-1ubuntu3~18.04.12:1.20.5+git20191008-0ubuntu1~18.04.12:1.20.8-2ubuntu2.1~18.04.12:1.20.8-2ubuntu2.2~18.04.1 Show 15 moreShow less2:1.20.8-2ubuntu2.2~18.04.22:1.20.8-2ubuntu2.2~18.04.32:1.20.8-2ubuntu2.2~18.04.42:1.20.8-2ubuntu2.2~18.04.52:1.20.8-2ubuntu2.2~18.04.62:1.20.8-2ubuntu2.2~18.04.72:1.20.8-2ubuntu2.2~18.04.82:1.20.8-2ubuntu2.2~18.04.92:1.20.8-2ubuntu2.2~18.04.102:1.20.8-2ubuntu2.2~18.04.112:1.20.8-2ubuntu2.2~18.04.11+esm12:1.20.8-2ubuntu2.2~18.04.11+esm22:1.20.8-2ubuntu2.2~18.04.11+esm32:1.20.8-2ubuntu2.2~18.04.11+esm42:1.20.8-2ubuntu2.2~18.04.11+esm5 |
None known |
xorg-serverUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2:1.20.5+git20191008-0ubuntu12:1.20.6-1ubuntu12:1.20.7-2ubuntu12:1.20.7-2ubuntu22:1.20.8-2ubuntu2 Show 25 moreShow less2:1.20.8-2ubuntu2.12:1.20.8-2ubuntu2.22:1.20.8-2ubuntu2.32:1.20.8-2ubuntu2.42:1.20.8-2ubuntu2.62:1.20.9-2ubuntu1.1~20.04.12:1.20.9-2ubuntu1.2~20.04.12:1.20.9-2ubuntu1.2~20.04.22:1.20.11-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.42:1.20.13-1ubuntu1~20.04.52:1.20.13-1ubuntu1~20.04.62:1.20.13-1ubuntu1~20.04.82:1.20.13-1ubuntu1~20.04.92:1.20.13-1ubuntu1~20.04.122:1.20.13-1ubuntu1~20.04.142:1.20.13-1ubuntu1~20.04.152:1.20.13-1ubuntu1~20.04.162:1.20.13-1ubuntu1~20.04.172:1.20.13-1ubuntu1~20.04.182:1.20.13-1ubuntu1~20.04.192:1.20.13-1ubuntu1~20.04.202:1.20.13-1ubuntu1~20.04.20+esm1 |
None known |
xorg-serverUbuntu:22.04:LTS |
All versions, plus listed versions 2:1.20.13-1ubuntu12:1.20.13-1ubuntu22:1.20.14-1ubuntu12:21.1.3-2ubuntu22:21.1.3-2ubuntu2.1 Show 21 moreShow less2:21.1.3-2ubuntu2.22:21.1.3-2ubuntu2.32:21.1.3-2ubuntu2.42:21.1.3-2ubuntu2.52:21.1.3-2ubuntu2.62:21.1.3-2ubuntu2.72:21.1.3-2ubuntu2.82:21.1.3-2ubuntu2.92:21.1.4-2ubuntu1.7~22.04.12:21.1.4-2ubuntu1.7~22.04.22:21.1.4-2ubuntu1.7~22.04.52:21.1.4-2ubuntu1.7~22.04.72:21.1.4-2ubuntu1.7~22.04.82:21.1.4-2ubuntu1.7~22.04.92:21.1.4-2ubuntu1.7~22.04.102:21.1.4-2ubuntu1.7~22.04.112:21.1.4-2ubuntu1.7~22.04.122:21.1.4-2ubuntu1.7~22.04.132:21.1.4-2ubuntu1.7~22.04.142:21.1.4-2ubuntu1.7~22.04.152:21.1.4-2ubuntu1.7~22.04.16 |
None known |
xorg-serverUbuntu:24.04:LTS |
All versions, plus listed versions 2:21.1.7-3ubuntu22:21.1.7-3ubuntu2.12:21.1.10-1ubuntu12:21.1.11-2ubuntu12:21.1.12-1ubuntu1 Show 8 moreShow less2:21.1.12-1ubuntu1.12:21.1.12-1ubuntu1.22:21.1.12-1ubuntu1.32:21.1.12-1ubuntu1.42:21.1.12-1ubuntu1.52:21.1.12-1ubuntu1.62:21.1.12-1ubuntu1.82:21.1.12-1ubuntu1.9 |
None known |
xorg-serverUbuntu:25.10 |
All versions, plus listed versions 2:21.1.16-1ubuntu12:21.1.18-1ubuntu12:21.1.18-1ubuntu1.1 |
None known |
xorg-serverUbuntu:26.10 |
All versions, plus listed versions 2:21.1.22-1ubuntu12:21.1.22-1ubuntu42:21.1.24-1ubuntu1 |
None known |
xorg-serverUbuntu:26.04:LTS |
All versions, plus listed versions 2:21.1.18-1ubuntu12:21.1.21-1ubuntu12:21.1.22-1ubuntu12:21.1.22-1ubuntu1.22:21.1.22-1ubuntu1.3 |
None known |
xorg-x11-serveropenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 21.1.9-1.1 | 21.1.9-1.1 |
xwaylandopenSUSE:Tumbleweed |
before 23.2.2-2.1 | 23.2.2-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | EUVD, NVD, OSV | |
| facts | CVE List | |
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-5574 is a high vulnerability (CVSS 7.0) in Red Hat Enterprise Linux 6, published October 25, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in xorg-server 21.1.9-r0.
References
access.redhat.com/errata/RHSA-2024:2298
bugzilla.redhat.com/show_bug.cgi?id=2244735
lists.x.org/archives/xorg-announce/2023-October/003430.html
security.netapp.com/advisory/ntap-20231130-0004
nvd.nist.gov/vuln/detail/CVE-2023-5574
Show 36 moreShow less
github.com/advisories/GHSA-79x6-r5x5-fvqw
security.alpinelinux.org/vuln/CVE-2023-5574
errata.almalinux.org/9/ALSA-2024-2298.html
docs.bell-sw.com/security/cves/CVE-2023-5574
security-tracker.debian.org/tracker/CVE-2023-5574
advisories.mageia.org/MGASA-2023-0307.html
bugs.mageia.org/show_bug.cgi?id=32453
openwall.com/lists/oss-security/2023/10/25/1
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-2261
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2298.json
cve.org/CVERecord?id=CVE-2023-5380
suse.com/support/update/announcement/2023/suse-su-20234269-1
bugzilla.suse.com/1216133
ubuntu.com/security/CVE-2023-5574