CVE-2022-3550

A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211051.

• CWE-119
• CWE-120

• https://cgit.freedesktop.org/xorg/xserver/commit/?id=11beef0b7f1ed290348e45618e5fa0d2bffcb72eMailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00012.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTPFVGYTOY4EWTJEBH3YGDTTU57FZAK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOEDFBYPSE3EMVHTEFCVEJD2R2Y5F2A5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXZZ6JBDBVBYPDI6DUTY6N36GNW37YHK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7W3NXSYK4P3XCZQBI3U6UWP4DPZIMRZ/
• https://security.gentoo.org/glsa/202305-30
• https://vuldb.com/?id.211051Third Party Advisory, VDB Entry
• https://www.debian.org/security/2022/dsa-5278Third Party Advisory
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=11beef0b7f1ed290348e45618e5fa0d2bffcb72eMailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00012.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTPFVGYTOY4EWTJEBH3YGDTTU57FZAK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOEDFBYPSE3EMVHTEFCVEJD2R2Y5F2A5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXZZ6JBDBVBYPDI6DUTY6N36GNW37YHK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7W3NXSYK4P3XCZQBI3U6UWP4DPZIMRZ/
• https://security.gentoo.org/glsa/202305-30
• https://vuldb.com/?id.211051Third Party Advisory, VDB Entry
• https://www.debian.org/security/2022/dsa-5278Third Party Advisory

Published

Oct 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35488In Zammad 5.2.0, an attacker could manipulate the rate limit…7.5
• CVE-2022-35489In Zammad 5.2.0, customers who have secondary organizations …6.5
• CVE-2022-3549A vulnerability was found in SourceCodester Simple Cold Stor…7.2
• CVE-2022-35490Zammad 5.2.0 is vulnerable to privilege escalation. Zammad h…9.8
• CVE-2022-35491TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded passw…9.8
• CVE-2022-35493A Cross-site scripting (XSS) vulnerability in json search pa…6.1
• CVE-2022-35500Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XS…5.4
• CVE-2022-35501Stored Cross-site Scripting (XSS) exists in the Amasty Blog …5.4
• CVE-2022-35503Improper verification of a user input in Open Source MANO v7…7.5
• CVE-2022-35505A segmentation fault in TripleCross v0.1.0 occurs when sendi…7.5
• CVE-2022-35506TripleCross v0.1.0 was discovered to contain a stack overflo…7.5
• CVE-2022-35507A response-header CRLF injection vulnerability in the Proxmo…7.1