CVE-2022-2320/ZDI-CAN-16070: xorg-x11-server: out-of-bounds write in ProcXkbSetDeviceInfo request handler of the Xkb extension Introduced In: https://github.com/freedesktop/xorg-xserver/commit/c06e27b2f6fd9f7b9f827623a48876a225264132 Fixed In: https://github.com/freedesktop/xorg-xserver/commit/dd8caf39e9e15d8f302e54045dd08d8ebf1025dc
Created xorg-x11-server tracking bugs for this issue: Affects: fedora-all [bug 2106689]
Created xorg-x11-server-Xwayland tracking bugs for this issue: Affects: fedora-all [bug 2110474]
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2022:5905 https://access.redhat.com/errata/RHSA-2022:5905
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-2320
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:7583 https://access.redhat.com/errata/RHSA-2022:7583
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2022:8221 https://access.redhat.com/errata/RHSA-2022:8221
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2022:8222 https://access.redhat.com/errata/RHSA-2022:8222