Dashboard / CVE-2023-5574

CVE-2023-5574

HIGH
MEDIUM Priority: 0.04 BB Relevance: 29/100
Published: 2023-10-25 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
redhat enterprise_linux 7.0
x.org x_server ≥ 1.13.0

References & Advisories (5)

https://bugzilla.redhat.com/show_bug.cgi?id=2244735
Issue Tracking Third Party Advisory

Bug Bounty Relevance

29 / 100
✓ No user interaction

CVSS Score

7.0 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.61%
Raw Score 0.006080
Percentile 49.6%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00608
2026-11-12
0.00608
2026-11-10
0.00608
2026-11-09
0.00608
2026-11-08
0.00608
2026-11-07
0.00608
2026-11-06
0.00608
2026-11-05
0.00608
2026-11-04
0.00608

Intelligence Sources

mitre ref →
nvd ref →

External Links