{"schemaVersion":3,"id":"CVE-2022-46340","aliases":["SUSE-SU-2023:0653-1","SUSE-SU-2023:0654-1","SUSE-SU-2023:0655-1","SUSE-SU-2023:0656-1","SUSE-SU-2023:0657-1","SUSE-SU-2023:0683-1","SUSE-SU-2023:0731-1","UBUNTU-CVE-2022-46340","DEBIAN-CVE-2022-46340"],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.","dates":{"published":"2022-12-14T00:00:00.000Z","modified":"2025-04-22T15:54:37.848Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02682,"percentile":0.85615,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.1979999999999999,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02484},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02682,"percentile":0.85615}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02484,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02586,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02682,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02682,"percentile":0.85615}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-787","name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/787.html"}],"affected":[{"vendor":"debian","product":"xorg-server","name":"xorg-server","label":"xorg-server","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/xorg-server","purlType":"deb","versions":[{"text":"< 2:21.1.5-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:21.1.5-1","eol":null,"hubHref":null},{"vendor":"debian","product":"xwayland","name":"xwayland","label":"xwayland","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/xwayland","purlType":"deb","versions":[{"text":"< 2:22.1.6-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:22.1.6-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"xorg-server","name":"xorg-server","label":"xorg-server","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/xorg-server","purlType":"deb","versions":[{"text":"< 2:1.15.1-0ubuntu2.11+esm7","noFixRecorded":false,"fixedIn":null},{"text":"< 2:1.18.4-0ubuntu0.12+esm5","noFixRecorded":false,"fixedIn":null},{"text":"< 2:1.19.6-1ubuntu4.13","noFixRecorded":false,"fixedIn":null},{"text":"< 2:1.20.13-1ubuntu1~20.04.5","noFixRecorded":false,"fixedIn":null},{"text":"< 2:21.1.3-2ubuntu2.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:1.15.1-0ubuntu2.11+esm7 | < 2:1.18.4-0ubuntu0.12+esm5 | < 2:1.19.6-1ubuntu4.13 | < 2:1.20.13-1ubuntu1~20.04.5 | < 2:21.1.3-2ubuntu2.5","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"xorg-server-hwe-16.04","name":"xorg-server-hwe-16.04","label":"xorg-server-hwe-16.04","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/xorg-server-hwe-16.04","purlType":"deb","versions":[{"text":"< 2:1.19.6-1ubuntu4.1~16.04.6+esm4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:1.19.6-1ubuntu4.1~16.04.6+esm4","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"xorg-server-hwe-18.04","name":"xorg-server-hwe-18.04","label":"xorg-server-hwe-18.04","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/xorg-server-hwe-18.04","purlType":"deb","versions":[{"text":"< 2:1.20.8-2ubuntu2.2~18.04.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:1.20.8-2ubuntu2.2~18.04.9","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"xwayland","name":"xwayland","label":"xwayland","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/xwayland","purlType":"deb","versions":[{"text":"< 2:22.1.1-1ubuntu0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:22.1.1-1ubuntu0.4","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.0","eol":{"isEol":true,"eolDate":"2026-08-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11","label":"11 (Bullseye)","eolFrom":"2026-08-31T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"11.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"36","noFixRecorded":false,"fixedIn":null},{"text":"37","noFixRecorded":false,"fixedIn":null}],"versionsText":"36 | 37","eol":{"isEol":true,"eolDate":"2023-05-16T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"36","label":"36","eolFrom":"2023-05-16T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"opensuse","product":"xorg-x11-server&distro=openSUSE Leap 15.4","name":"xorg-x11-server","label":"xorg-x11-server&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.20.3-150400.38.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1 | < 1.20.3-150400.38.19.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"xwayland&distro=openSUSE Leap 15.4","name":"xwayland","label":"xwayland&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/xwayland&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 21.1.4-150400.3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 21.1.4-150400.3.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Enterprise Storage 7","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Enterprise Storage 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Enterprise Storage 7","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Enterprise Storage 7.1","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 1.20.3-150100.14.5.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150100.14.5.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","purlType":"rpm","versions":[{"text":"< 1.20.3-150400.38.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150400.38.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Module for Development Tools 15 SP4","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Module for Development Tools 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Module for Development Tools 15 SP4","purlType":"rpm","versions":[{"text":"< 1.20.3-150400.38.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150400.38.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Real Time 15 SP3","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Real Time 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Real Time 15 SP3","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 7.6_1.18.3-76.63.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6_1.18.3-76.63.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 1.19.6-4.45.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.6-4.45.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.19.6-4.45.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.6-4.45.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP5","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 1.19.6-10.46.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.6-10.46.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 1.20.3-150100.14.5.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150100.14.5.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 1.19.6-4.45.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.6-4.45.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 1.19.6-10.46.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.6-10.46.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","purlType":"rpm","versions":[{"text":"< 1.20.3-150100.14.5.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150100.14.5.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 1.19.6-10.46.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.6-10.46.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Workstation Extension 15 SP4","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Workstation Extension 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Workstation Extension 15 SP4","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Manager Proxy 4.2","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Manager Proxy 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Manager Proxy 4.2","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Manager Server 4.2","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Manager Server 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Manager Server 4.2","purlType":"rpm","versions":[{"text":"< 1.20.3-150200.22.5.69.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-150200.22.5.69.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE OpenStack Cloud 9","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE OpenStack Cloud 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE OpenStack Cloud 9","purlType":"rpm","versions":[{"text":"< 1.19.6-4.45.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.6-4.45.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE OpenStack Cloud Crowbar 9","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE OpenStack Cloud Crowbar 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE OpenStack Cloud Crowbar 9","purlType":"rpm","versions":[{"text":"< 1.19.6-4.45.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.6-4.45.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xwayland&distro=SUSE Linux Enterprise Workstation Extension 15 SP4","name":"xwayland","label":"xwayland&distro=SUSE Linux Enterprise Workstation Extension 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xwayland&distro=SUSE Linux Enterprise Workstation Extension 15 SP4","purlType":"rpm","versions":[{"text":"< 21.1.4-150400.3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 21.1.4-150400.3.12.1","eol":null,"hubHref":null},{"vendor":"x.org","product":"x_server","name":"x server","label":"x_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.20.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.20.4","eol":null,"hubHref":"/vendor/xorg/x_server"}],"affectedCount":39,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://access.redhat.com/security/cve/CVE-2022-46340","label":"access.redhat.com/security/cve/CVE-2022-46340","hostname":"access.redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151755","label":"bugzilla.redhat.com/show_bug.cgi?id=2151755","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","Mailing List","Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5304","label":"www.debian.org/security/2022/dsa-5304","hostname":"www.debian.org","tags":["Vendor Advisory","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWTH3SNJ3GKYDSN7I3QDGWYEPSMWU6EP/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202305-30","label":"security.gentoo.org/glsa/202305-30","hostname":"security.gentoo.org","tags":[]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230653-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230653-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1205874","label":"bugzilla.suse.com/1205874","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46340","label":"www.suse.com/security/cve/CVE-2022-46340","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230654-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230654-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230655-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230655-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230656-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230656-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230657-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230657-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230683-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230683-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230731-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230731-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-46340","label":"ubuntu.com/security/CVE-2022-46340","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5778-1","label":"ubuntu.com/security/notices/USN-5778-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5778-2","label":"ubuntu.com/security/notices/USN-5778-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46340","label":"www.cve.org/CVERecord?id=CVE-2022-46340","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-46340","label":"security-tracker.debian.org/tracker/CVE-2022-46340","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-3256-1","DSA-5304-1","MGASA-2023-0012","OPENSUSE-SU-2024:12569-1","OPENSUSE-SU-2024:12570-1","RHSA-2023:0045","RHSA-2023:0046","RHSA-2023:2248","RHSA-2023:2249","RHSA-2023:2257","RHSA-2023:2805","RHSA-2023:2806","RHSA-2023:2830","RHSA-2025:12751","SUSE-SU-2022:4479-1","SUSE-SU-2022:4480-1","SUSE-SU-2022:4481-1","SUSE-SU-2022:4482-1","SUSE-SU-2022:4483-1","SUSE-SU-2022:4484-1","SUSE-SU-2022:4485-1","SUSE-SU-2022:4487-1","USN-5778-1","USN-5778-2"],"duplicates":[],"related":["OPENSUSE-SU-2024:12569-1","OPENSUSE-SU-2024:12570-1","SUSE-SU-2022:4479-1","SUSE-SU-2022:4480-1","SUSE-SU-2022:4481-1","SUSE-SU-2022:4482-1","SUSE-SU-2022:4483-1","SUSE-SU-2022:4484-1","SUSE-SU-2022:4485-1","SUSE-SU-2022:4487-1","USN-5778-1","USN-5778-2"]},"timeline":[{"kind":"published","date":"2022-12-14T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-04-22T15:54:37.848Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:04:26.063Z","stale":false,"partial":false}}