The LockServer function in os/utils.c in X.Org xserver...
Low severity
Unreviewed
Published
May 13, 2022
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Jul 3, 2012
Published to the GitHub Advisory Database
May 13, 2022
Last updated
Feb 1, 2023
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.
References