CVE-2023-5574 HIGH

CVE-2023-5574: Xorg-x11-server: use-after-free bug in damagedestroy

Vendor Red Hat
Product Red Hat Enterprise Linux 6
Weakness CWE-416
Published October 25, 2023
Last update November 20, 2025

CVSS base score

7.0/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.

Key dates

02Disclosure timeline

October 25, 2023 CVE published
November 20, 2025 Record updated