CVE:CVE-2022-46344
CNNVD:CNNVD-202212-3270
X.Org X Server是X.org基金会的一款X Window系统显示服务器。
X.Org X Server存在缓冲区错误漏洞，该漏洞源于其XIChangeProperty请求的处理程序对长度验证不正确导致超出边界的内存读取和潜在的信息泄露可能导致X server运行权限的系统上的本地权限提升，并导致ssh X转发会话的远程代码执行。
solution:Upgrade x.org x_server to a higher version than 1.20.4,and avoid the version 1.20.4; Upgrade fedoraproject fedora to a higher version than 36,37,and avoid the version 36,37; Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0