CVE-2023-5367
25.10.2023, 20:15
A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.Enginsight
| Vendor | Product | Version |
|---|---|---|
| x.org | x_server | 𝑥 < 21.1.9 |
| x.org | xwayland | 𝑥 < 23.2.2 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_for_ibm_z_systems | 7.0_s390x:_s390x |
| redhat | enterprise_linux_for_power_big_endian | 7.0_ppc64:_ppc64 |
| redhat | enterprise_linux_for_power_little_endian | 7.0_ppc64le:_ppc64le |
| redhat | enterprise_linux_for_scientific_computing | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| debian | debian_linux | 11.0 |
| debian | debian_linux | 12.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| xorg |
| ||||||||||||||||||
| xorg-hwe-16.04 |
| ||||||||||||||||||
| xorg-hwe-18.04 |
| ||||||||||||||||||
| xorg-server |
| ||||||||||||||||||
| xorg-server-hwe-16.04 |
| ||||||||||||||||||
| xorg-server-hwe-18.04 |
| ||||||||||||||||||
| xorg-server-lts-utopic |
| ||||||||||||||||||
| xorg-server-lts-vivid |
| ||||||||||||||||||
| xorg-server-lts-wily |
| ||||||||||||||||||
| xorg-server-lts-xenial |
| ||||||||||||||||||
| xwayland |
|
Common Weakness Enumeration
References