CVE-2023-5380 Xorg-x11-server: use-after-free bug in destroywindow
A use-after-free flaw in Xorg X server causes a crash in specific multi-screen configurations when windows are destroyed after pointer warping.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-5380?
CVE-2023-5380 is a medium-severity use after free vulnerability in Debian Debian Linux, published on 25 Oct 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.
Weakness: CWE-416
Which versions are affected by CVE-2023-5380?
It affects 5 products.
Linux distribution packages (19)
tigervnc AlmaLinux:8 | All versions | 1.13.1-8.el8 |
tigervnc-icons AlmaLinux:8 | All versions | 1.13.1-8.el8 |
tigervnc-license AlmaLinux:8 | All versions | 1.13.1-8.el8 |
tigervnc-selinux AlmaLinux:8 | All versions | 1.13.1-8.el8 |
tigervnc-server AlmaLinux:8 | All versions | 1.13.1-8.el8 |
tigervnc-server-minimal AlmaLinux:8 | All versions | 1.13.1-8.el8 |
tigervnc-server-module AlmaLinux:8 | All versions | 1.13.1-8.el8 |
tigervnc Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-icons Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-license Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-selinux Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-server Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-server-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-server-minimal Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-server-minimal-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-server-module Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
tigervnc-server-module-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.13.1-8.el8 |
Products include Debian Debian Linux, Fedoraproject Fedora, Redhat Enterprise Linux, X.org X Server, X.org Xwayland.
How do I fix CVE-2023-5380?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2023-5380 being exploited?
There is no known exploitation of CVE-2023-5380 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALSA-2024:3067, AZL-31704, AZL-44376, BELL-CVE-2023-5380, CLSA-2025-1744632481, DEBIAN-CVE-2023-5380 and 3 more.