vulnerability

FreeBSD: VID-6cc63bf5-a727-4155-8ec4-68b626475e68 (CVE-2023-0494): xorg-server -- Security issue in the X server

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
7	(AV:L/AC:L/Au:S/C:C/I:C/A:C)	Feb 8, 2023	Feb 9, 2023	Dec 10, 2025

Severity

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

Feb 8, 2023

Added

Feb 9, 2023

Modified

Dec 10, 2025

Description

The X.org project reports: CVE-2023-0494/ZDI-CAN-19596: X.Org Server DeepCopyPointerClasses use-after-free A dangling pointer in DeepCopyPointerClasses can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read/write into freed memory.

Solutions

freebsd-upgrade-package-xorg-serverfreebsd-upgrade-package-xephyrfreebsd-upgrade-package-xorg-vfbserverfreebsd-upgrade-package-xorg-nestserverfreebsd-upgrade-package-xwaylandfreebsd-upgrade-package-xwayland-devel

References

CVE-2023-0494
https://attackerkb.com/topics/CVE-2023-0494
CWE-416

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today