CVE-2022-3551

A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211052.

• CWE-404
• CWE-401

• https://cgit.freedesktop.org/xorg/xserver/commit/?id=18f91b950e22c2a342a4fbc55e9ddf7534a707d2Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00012.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTPFVGYTOY4EWTJEBH3YGDTTU57FZAK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOEDFBYPSE3EMVHTEFCVEJD2R2Y5F2A5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXZZ6JBDBVBYPDI6DUTY6N36GNW37YHK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7W3NXSYK4P3XCZQBI3U6UWP4DPZIMRZ/
• https://security.gentoo.org/glsa/202305-30
• https://vuldb.com/?id.211052Third Party Advisory, VDB Entry
• https://www.debian.org/security/2022/dsa-5278Third Party Advisory
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=18f91b950e22c2a342a4fbc55e9ddf7534a707d2Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00012.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTPFVGYTOY4EWTJEBH3YGDTTU57FZAK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOEDFBYPSE3EMVHTEFCVEJD2R2Y5F2A5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXZZ6JBDBVBYPDI6DUTY6N36GNW37YHK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7W3NXSYK4P3XCZQBI3U6UWP4DPZIMRZ/
• https://security.gentoo.org/glsa/202305-30
• https://vuldb.com/?id.211052Third Party Advisory, VDB Entry
• https://www.debian.org/security/2022/dsa-5278Third Party Advisory

Published

Oct 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35503Improper verification of a user input in Open Source MANO v7…7.5
• CVE-2022-35505A segmentation fault in TripleCross v0.1.0 occurs when sendi…7.5
• CVE-2022-35506TripleCross v0.1.0 was discovered to contain a stack overflo…7.5
• CVE-2022-35507A response-header CRLF injection vulnerability in the Proxmo…7.1
• CVE-2022-35508Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (…9.8
• CVE-2022-35509An issue was discovered in EyouCMS 1.5.8. There is a Storage…5.4
• CVE-2022-35513The Blink1Control2 application <= 2.2.7 uses weak password e…7.5
• CVE-2022-35516DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote…9.8
• CVE-2022-35517WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi…8.8
• CVE-2022-35518WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi…9.8
• CVE-2022-35519WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewal…9.8
• CVE-2022-3552Unrestricted Upload of File with Dangerous Type in GitHub re…7.2