NetSight
IP …
high7.8

CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server.

Impact

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Affected products

VendorProductAffected versions
X.OrgX Server
before 21.1.9
X.OrgXwayland
before 23.2.2
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux For Ibm Z Systems
Version 7.0_s390x
RedhatEnterprise Linux For Power Big Endian
Version 7.0_ppc64
RedhatEnterprise Linux For Power Little Endian
Version 7.0_ppc64le
RedhatEnterprise Linux For Scientific Computing
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
FedoraprojectFedora
Versions 37, 38, 39
DebianDebian Linux
Versions 11.0, 12.0

Weakness classification

CWE-787

References