CVE-2023-5367

Katalog CVE

CVSS 7.8 · High EPSS 0,62%

Kerentanan Out-of-bounds Write pada x.org x server, x.org xwayland +10 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Rincian

Terbit di NVD

25 Oktober 2023

Terakhir diubah

23 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.x.org/archives/xorg-announce/2023-October/003430.html patch · advisory vendor
• https://access.redhat.com/errata/RHSA-2023:6802 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:6808 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7373 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7388 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7405 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7428 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7436 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7526 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7533 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:0010 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:0128 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-5367 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2243091 issue tracking · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:2169
• https://access.redhat.com/errata/RHSA-2024:2170
• https://access.redhat.com/errata/RHSA-2024:2995
• https://access.redhat.com/errata/RHSA-2024:2996
• https://access.redhat.com/errata/RHSA-2025:12751
• https://lists.debian.org/debian-lts-announce/2023/10/msg00036.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WS5E7H4A5J3U5Y...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3RK66CXMXO3PCPD...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YBK3I6SETHETBH...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AKKIE626TZOOPD5...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO2Q2NP6R62ZRQQ...