Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

CVE-2022-46343 is a high-severity use-after-free vulnerability identified in the xorg-x11-server, specifically version 1.20.4. The vulnerability arises from improper memory handling in the ScreenSaverSetAttributes request handler, which may write to memory after it has been freed. This flaw can be exploited locally to elevate privileges on systems where the X server runs with elevated privileges. Additionally, it presents a remote code execution risk in scenarios involving SSH X forwarding sessions, where an attacker could potentially execute arbitrary code remotely. The vulnerability is classified under CWE-416 (Use After Free), indicating that the program accesses memory after it has been freed, leading to undefined behavior and potential exploitation. The CVSS 3.1 base score is 8.8, reflecting high severity with a vector indicating network attack vector (AV:N), low attack complexity (AC:L), requiring privileges (PR:L), no user interaction (UI:N), unchanged scope (S:U), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). No known exploits have been reported in the wild to date. The vulnerability affects xorg-x11-server version 1.20.4, a widely used implementation of the X Window System server, which is fundamental for graphical user interfaces on many Unix-like operating systems, including Linux distributions. The flaw's exploitation could allow attackers to gain elevated privileges locally or execute code remotely via SSH X forwarding, which is commonly used for graphical applications over secure shell connections. This makes the vulnerability particularly critical in environments where X server is run with elevated privileges or where SSH X forwarding is enabled and accessible.

Detailed information about CVE-2022-46343: use-after-free in xorg-x11-server affecting n/a xorg-x11-server. Get real-time updates, technical details, and mitiga

CVE-2022-46343: use-after-free in xorg-x11-server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-46343: use-after-free in xorg-x11-server

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se

CVE-2022-46342 is a high-severity use-after-free vulnerability identified in the X.Org X11 server, specifically affecting version 1.20.4 of the xorg-x11-server package. The flaw arises from improper memory management in the handler for the XvdiSelectVideoNotify request, where the server may attempt to write to memory that has already been freed. This type of vulnerability, classified under CWE-416, can lead to undefined behavior including memory corruption, which attackers can exploit to escalate privileges locally. The vulnerability requires local privileges (PR:L) to exploit and does not require user interaction (UI:N). The attack vector is network-based (AV:N), meaning an attacker could potentially exploit this remotely if they have network access to the X server, which is uncommon but possible in some configurations. The CVSS v3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability (all rated high). Successful exploitation could allow an attacker to execute arbitrary code with elevated privileges, compromising the system's security and stability. No known exploits are currently reported in the wild, but the severity and nature of the flaw warrant prompt attention. The vulnerability is specific to the xorg-x11-server version 1.20.4, a widely used display server in many Linux distributions, especially in desktop and workstation environments. Given the critical role of the X server in graphical environments, exploitation could disrupt user sessions or allow privilege escalation to root or other sensitive accounts.

Detailed information about CVE-2022-46342: use-after-free in xorg-x11-server affecting n/a xorg-x11-server. Get real-time updates, technical details, and mitiga

CVE-2022-46342: use-after-free in xorg-x11-server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-46342: use-after-free in xorg-x11-server

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.

CVE-2022-43508 is a use-after-free vulnerability identified in OMRON Corporation's CX-Programmer software, versions 9.77 and earlier. CX-Programmer is an engineering tool used for programming and configuring OMRON PLCs (Programmable Logic Controllers), which are critical components in industrial automation and control systems. The vulnerability arises when the software processes specially crafted CXP project files. Specifically, the use-after-free condition occurs due to improper handling of memory objects, where a previously freed memory region is accessed again. This flaw can lead to memory corruption, enabling an attacker to cause information disclosure or execute arbitrary code within the context of the user running the application. Exploitation requires a user to open a maliciously crafted CXP file, which means user interaction is necessary. The CVSS v3.1 base score is 7.8 (high severity), with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No public exploits are currently known in the wild. Given the nature of CX-Programmer as a specialized industrial control system (ICS) software, exploitation could compromise the integrity and availability of industrial processes, potentially leading to operational disruptions or safety hazards in automated environments.

Detailed information about CVE-2022-43508: Use-after-free in OMRON Corporation CX-Programmer affecting OMRON Corporation CX-Programmer. Get real-time updates, t

Title	Severity	Type	Source	Date

Threats Tagged 'use-after-free'

Filter Threats

Threats Tagged 'use-after-free'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility