Fiche vulnérabilité

CVE-2023-5367 : faille élevée x.org x server (CVSS 7.8)

Description

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

En bref

Sévérité: Élevée (CVSS 7.8)
Vecteur CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation active: Non signalée par la CISA
Publication: 25 oct. 2023
Dernière mise à jour: 23 juin 2026

Produits concernés

x.org x server
x.org xwayland
redhat enterprise linux
redhat enterprise linux desktop
redhat enterprise linux for ibm z systems
redhat enterprise linux for power big endian
redhat enterprise linux for power little endian
redhat enterprise linux for scientific computing
redhat enterprise linux server
redhat enterprise linux workstation
fedoraproject fedora
debian debian linux

Références

Rechercher une autre vulnérabilité dans la base CVE