Fluid Attacks Database

Description

libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version
debian 11	libglvnd	=1.3.2-1 \|\| =1.3.3-1 \|\| =1.3.4-1 \|\| =1.3.4-2 \|\| =1.4.0-1 \|\| =1.5.0-1 \|\| =1.6.0-1 \|\| =1.7.0-1 \|\| =1.7.0-2 \|\| =1.7.0-3
debian 12	libglvnd	=1.6.0-1 \|\| =1.7.0-1 \|\| =1.7.0-2 \|\| =1.7.0-3
debian 13	libglvnd	=1.7.0-1 \|\| =1.7.0-2 \|\| =1.7.0-3
debian 14	libglvnd	=1.7.0-1 \|\| =1.7.0-2 \|\| =1.7.0-3

Aliases

1. CVE-2023-459242. NVD-2023-459243. OSV-DEBIAN-2023-459244. OSV-2023-459245. SECURITY-TRACKER-CVE-2023-45924

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.