CVE-2022-2320 is a high-severity memory access vulnerability in the Xorg-x11-server, specifically within the handling of ProcXkbSetDeviceInfo requests, affecting x.org x_server. This flaw stems from insufficient validation of user-supplied data, enabling an authenticated local attacker to achieve privilege escalation and execute arbitrary code as root. While rated with a CVSS score of 7.8, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
21.1.0CPE matchmatch criteria | cpe:2.3:a:x.org:x_server:21.1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.