CVE-2022-3553

X.org Server xquartz X11Controller.m denial of service

3.5 LowFix available

A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m of the component xquartz. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier VDB-211053 was assigned to this vulnerability.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

1.67%Up 0.8 points since Oct 18, 2022

What each source reports

CVE List Score used 3.5

X.org Server xquartz X11Controller.m denial of service

Record: CVE-2022-3553
CVSS 3.1: 3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-404
Updated: 2026-11-02

EUVDEUVD-2022-42919 3.5

Record: EUVD-2022-42919
CVSS 3.1: 3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-h482-v3jv-v33c 7.5

A vulnerability, which was classified as problematic, was found in X.org Server. This affects an...

Record: GHSA-h482-v3jv-v33c
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-404
Updated: 2026-11-02

NVD 3.5

Record: CVE-2022-3553
CVSS 3.1: 3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-404
Updated: 2026-11-02

OSVAZL-44757 6.5

CVE-2022-3553 affecting package xorg-x11-server 1.20.10-6

Record: AZL-44757
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-05

OSV 6.5

Record: CVE-2022-3553
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2022-2110 7.5

xorg-x11-server security update

X.Org X11 X server

Security Fix(es):

A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211052.(CVE-2022-3551)

Record: OESA-2022-2110
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-3553 No score

Record: DEBIAN-CVE-2022-3553
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`xorg-x11-server` Azure Linux:3	through 1.20.10-6	None known
`xorg-server` Debian:12	before 2:21.1.4-1	2:21.1.4-1
`xorg-server` Debian:13	before 2:21.1.4-1	2:21.1.4-1
`xorg-server` Debian:14	before 2:21.1.4-1	2:21.1.4-1
`xorg-x11-server` openEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs	before 1.20.8-12.oe1	1.20.8-12.oe1
`xorg-x11-server` openEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs	before 1.20.8-13.oe1	1.20.8-13.oe1
`xorg-x11-server` openEuler:22.03-LTS From an advisory covering 2 CVEs	before 1.20.11-12.oe2203	1.20.11-12.oe2203

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 5, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-3553 is a low vulnerability (CVSS 3.5) in Devolutions Server, published October 17, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 76th percentile. Fixed in xorg-server 2:21.1.4-1.