The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.4 / 21.1.8 / 23.1.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-088-02 advisory.

  - Fix for CVE-2023-1393 (CVE-2023-1393)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-eb3c27ff25 advisory.

    xwayland 22.1.9     Security fix for CVE-2023-1393


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b7835960ac advisory.

    Fix for CVE-2023-1393


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1716-1 advisory.

    - CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1594 advisory.

    - CVE fix for: CVE-2023-1393       Resolves: bz#2180291

    xorg-x11-server

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6921:03 advisory.

    * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability     (CVE-2023-1393)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6919:07 advisory.

    * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability     (CVE-2023-1393)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0279 advisory.

    This advisory aggregates security fixes for the xorg-x11-server SRPM in CIQ LTS 8.6. It addresses 34 CVEs:
    CVE-2022-46341, CVE-2023-6816, CVE-2021-4009, CVE-2024-0229, CVE-2021-4011, and 29 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0505 advisory.

    This advisory aggregates security fixes for the xorg-x11-server-Xwayland SRPM in CIQ LTS 9.2. It addresses     28 CVEs: CVE-2022-46341, CVE-2023-6816, CVE-2021-4009, CVE-2024-0229, CVE-2023-6478, and 23 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0355 advisory.

    This advisory aggregates security fixes for the xorg-x11-server-Xwayland SRPM in CIQ LTS 8.8. It addresses     14 CVEs: CVE-2023-6816, CVE-2024-0229, CVE-2023-6478, CVE-2024-21885, CVE-2024-31080, and 9 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation.
    If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a     dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
    (CVE-2023-1393)

  - A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect     calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function     in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible     escalation of privileges or denial of service. (CVE-2023-5367)

  - A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and     legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if     the pointer is warped from within a window on one screen to the root window of the other screen and if the     original window is destroyed followed by another window being destroyed. (CVE-2023-5380)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
173710	Slackware Linux 15.0 / current xorg-server Vulnerability (SSA:2023-088-02)	Nessus	Slackware Local Security Checks	2023/3/30	2023/4/10	high
173724	Fedora 37 : xorg-x11-server-Xwayland (2023-eb3c27ff25)	Nessus	Fedora Local Security Checks	2023/3/31	2024/11/14	high
173761	Fedora 38 : xorg-x11-server (2023-b7835960ac)	Nessus	Fedora Local Security Checks	2023/4/2	2024/11/14	high
173773	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xwayland (SUSE-SU-2023:1716-1)	Nessus	SuSE Local Security Checks	2023/4/2	2026/6/26	high
173848	Oracle Linux 7 : tigervnc / and / xorg-x11-server (ELSA-2023-1594)	Nessus	Oracle Linux Local Security Checks	2023/4/4	2024/11/1	high
291985	MiracleLinux 9 : xorg-x11-server-Xwayland-22.1.9-2.el9 (AXSA:2023-6921:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
292504	MiracleLinux 9 : xorg-x11-server-1.20.11-19.el9 (AXSA:2023-6919:07)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
354155	Rocky Linux 8.6 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0279)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
356930	Rocky Linux 9.2 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0505)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
354980	Rocky Linux 8.8 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0355)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
195268	EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2024-1582)	Nessus	Huawei Local Security Checks	2024/5/9	2024/5/9	high

检测

插件搜索

high

high

high

high

high

high

high

critical

critical

critical

high