Kritik CVSS 9.8

CVE-2023-6816: X Server: sınır dışı yazma

Yayın: 18 Ocak 2024 08:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.

Özet bilgiler

Ürün: X.org X Server
CVSS v3.1: 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: %2,11 (yüzdelik 82)
CWE: CWE-787
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
x.org-x-server	—	—	21.1.11
x.org-xwayland	—	—	23.2.4
fedoraproject-fedora	39	39	—
redhat-enterprise-linux-desktop	7.0	7.0	—
redhat-enterprise-linux-server	7.0	7.0	—
redhat-enterprise-linux-workstation	7.0	7.0	—
debian-debian-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları