Fluid Attacks Database

Description

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	xorg-server	=2:21.1.7-3 \|\| =2:21.1.7-3+deb12u1 \|\| =2:21.1.7-3+deb12u2 \|\| >=0 <2:21.1.7-3+deb12u3	2:21.1.7-3+deb12u3
debian 13	xorg-server	>=0 <2:21.1.10-1	2:21.1.10-1
debian 11	xorg-server	=2:1.20.11-1 \|\| =2:1.20.11-1+deb11u1 \|\| =2:1.20.11-1+deb11u2 \|\| =2:1.20.11-1+deb11u3 \|\| =2:1.20.11-1+deb11u4 \|\| =2:1.20.11-1+deb11u5 \|\| =2:1.20.11-1+deb11u6 \|\| =2:1.20.11-1+deb11u7 \|\| =2:1.20.11-1+deb11u8 \|\| >=0 <2:1.20.11-1+deb11u9	2:1.20.11-1+deb11u9
debian 14	xorg-server	>=0 <2:21.1.10-1	2:21.1.10-1
debian 12	xwayland	=2:22.1.9-1 \|\| =2:23.1.0-1 \|\| =2:23.1.1-1 \|\| =2:23.2.0-1 \|\| =2:23.2.1-1 \|\| =2:23.2.2-1 \|\| =2:23.2.3-1 \|\| =2:23.2.4-1 \|\| =2:23.2.6-1 \|\| =2:24.0.99.901-1 \|\| =2:24.1.0-1 \|\| =2:24.1.10-1 \|\| =2:24.1.11-1 \|\| =2:24.1.2-1 \|\| =2:24.1.3-1 \|\| =2:24.1.4-1 \|\| =2:24.1.4-2 \|\| =2:24.1.4-3 \|\| =2:24.1.5-1 \|\| =2:24.1.6-1 \|\| =2:24.1.8-1 \|\| =2:24.1.9-1	-
debian 13	xwayland	>=0 <2:23.2.3-1	2:23.2.3-1
debian 14	xwayland	>=0 <2:23.2.3-1	2:23.2.3-1
rpm rhel9	tigervnc	<0:1.13.1-3.el9_3.3	0:1.13.1-3.el9_3.3
rpm rhel8.8	tigervnc	<0:1.12.0-15.el8_8.4	0:1.12.0-15.el8_8.4
rpm rhel8	xorg-x11-server	<0:1.20.11-22.el8	0:1.20.11-22.el8

1-10 of 20

Aliases

1. CVE-2023-64782. NVD-2023-64783. OSV-DEBIAN-2023-64784. OSV-2023-64785. SECURITY-TRACKER-CVE-2023-6478

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.