CVE-2022-3550: Debian Linux

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211051.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• X.org X Server: before 21.1.6 (fixed in 21.1.6)

Published 2022-10-17. Last modified 2026-06-17.