CVE-2023-5367

high

Description

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

References

https://www.debian.org/security/2023/dsa-5534

https://security.netapp.com/advisory/ntap-20231130-0004/

https://security.gentoo.org/glsa/202401-30

https://lists.x.org/archives/xorg-announce/2023-October/003430.html

https://lists.fedoraproject.org/archives/list/[email protected]/message/TJXNI4BXURC2BKPNAHFJK3C5ZETB7PER/

https://lists.fedoraproject.org/archives/list/[email protected]/message/SN6KV4XGQJRVAOSM5C3CWMVAXO53COIP/

https://lists.fedoraproject.org/archives/list/[email protected]/message/SEDJN4VFN57K5POOC7BNVD6L6WUUCSG6/

https://lists.fedoraproject.org/archives/list/[email protected]/message/L2RMNR4235YXZZQ2X7Q4MTOZDMZ7BBQU/

https://lists.fedoraproject.org/archives/list/[email protected]/message/HO2Q2NP6R62ZRQQG3XQ4AXUT7J2EKKKY/

https://lists.fedoraproject.org/archives/list/[email protected]/message/AKKIE626TZOOPD533EYN47J4RFNHZVOP/

https://lists.fedoraproject.org/archives/list/[email protected]/message/4YBK3I6SETHETBHDETFWM3VSZUQICIDV/

https://lists.fedoraproject.org/archives/list/[email protected]/message/3RK66CXMXO3PCPDU3GDY5FK4UYHUXQJT/

https://lists.fedoraproject.org/archives/list/[email protected]/message/2WS5E7H4A5J3U5YBCTMRPQVGWK5LVH7D/

https://bugzilla.redhat.com/show_bug.cgi?id=2243091

https://access.redhat.com/security/cve/CVE-2023-5367

https://access.redhat.com/errata/RHSA-2024:2170

https://access.redhat.com/errata/RHSA-2024:2169

https://access.redhat.com/errata/RHSA-2024:0128

https://access.redhat.com/errata/RHSA-2024:0010

https://access.redhat.com/errata/RHSA-2023:7533

https://access.redhat.com/errata/RHSA-2023:7526

https://access.redhat.com/errata/RHSA-2023:7436

https://access.redhat.com/errata/RHSA-2023:7428

https://access.redhat.com/errata/RHSA-2023:7405

https://access.redhat.com/errata/RHSA-2023:7388

https://access.redhat.com/errata/RHSA-2023:7373

https://access.redhat.com/errata/RHSA-2023:6808

https://access.redhat.com/errata/RHSA-2023:6802

Details

Source: Mitre, NVD

Published: 2023-10-25

Updated: 2024-04-30

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High