Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
XWayland 权限许可和访问控制漏洞
Vulnerability Description
Wayland是软件开发者Kristian Hogsberg所研发的一款规定了显示服务器与客户机之间进行通信的协议。XWayland是Wayland的X客户端。 XWayland 1.16.x版本和1.17.2之前1.17.x版本的身份验证设置中存在安全漏洞，该漏洞源于程序在non-authenticating模式下启动服务器。本地攻击者可借助UNIX套接字利用该漏洞从任意X11客户端读取信息或向任意X11客户端发送信息。
CVSS Information
N/A
Vulnerability Type
N/A