Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-6377

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION

Default version status: affected

  • 0:1.1.0-25.el6_10.14 to < *unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

  • 0:1.8.0-28.el7_9 to < *unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

  • 0:1.20.4-25.el7_9 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:1.13.1-2.el8_9.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:1.20.11-22.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:21.1.3-15.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support

Default version status: affected

  • 0:1.9.0-15.el8_2.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Default version status: affected

  • 0:1.9.0-15.el8_2.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

Default version status: affected

  • 0:1.9.0-15.el8_2.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 0:1.11.0-8.el8_4.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Default version status: affected

  • 0:1.11.0-8.el8_4.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Default version status: affected

  • 0:1.11.0-8.el8_4.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support

Default version status: affected

  • 0:1.12.0-6.el8_6.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

Default version status: affected

  • 0:1.12.0-15.el8_8.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.13.1-3.el9_3.3 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.20.11-24.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:22.1.9-5.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support

Default version status: affected

  • 0:1.11.0-22.el9_0.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

Default version status: affected

  • 0:1.12.0-14.el9_2.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

References