Vulnerabilities > CVE-2023-6816 - Out-of-bounds Write vulnerability in multiple products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

NVD

Published: 2024-01-18

Updated: 2024-03-07

Summary

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.

Vulnerable Configurations

Part	Description	Count
Application	X.Org X.Org Xwayland - X.Org Xwayland 23.2.2 X.Org Xorg Server 1.7.0 X.Org Xorg Server 1.7.0.901 X.Org Xorg Server 1.7.0.902 X.Org Xorg Server 1.7.1 X.Org Xorg Server 1.7.1.901 X.Org Xorg Server 1.7.1.902 X.Org Xorg Server 1.7.2 X.Org Xorg Server 1.7.2.901 X.Org Xorg Server 1.7.2.902 X.Org Xorg Server 1.7.3 X.Org Xorg Server 1.7.3.901 X.Org Xorg Server 1.7.3.902 X.Org Xorg Server 1.7.4 X.Org Xorg Server 1.7.4.901 X.Org Xorg Server 1.7.4.902 X.Org Xorg Server 1.7.5 X.Org Xorg Server 1.7.5.901 X.Org Xorg Server 1.7.5.902 X.Org Xorg Server 1.7.6 X.Org Xorg Server 1.7.6.901 X.Org Xorg Server 1.7.6.902 X.Org Xorg Server 1.7.7 X.Org Xorg Server 1.7.99.1 X.Org Xorg Server 1.7.99.2 X.Org Xorg Server 1.7.99.901 X.Org Xorg Server 1.7.99.902 X.Org Xorg Server 1.8.0 X.Org Xorg Server 1.8.0.901 X.Org Xorg Server 1.8.0.902 X.Org Xorg Server 1.8.1 X.Org Xorg Server 1.8.1.901 X.Org Xorg Server 1.8.1.902 X.Org Xorg Server 1.8.2 X.Org Xorg Server 1.8.2.901 X.Org Xorg Server 1.8.2.902 X.Org Xorg Server 1.8.99.901 X.Org Xorg Server 1.8.99.902 X.Org Xorg Server 1.8.99.903 X.Org Xorg Server 1.8.99.904 X.Org Xorg Server 1.8.99.905 X.Org Xorg Server 1.9.0 X.Org Xorg Server 1.9.0.901 X.Org Xorg Server 1.9.0.902 X.Org Xorg Server 1.9.1 X.Org Xorg Server 1.9.2 X.Org Xorg Server 1.9.2.901 X.Org Xorg Server 1.9.2.902 X.Org Xorg Server 1.9.3 X.Org Xorg Server 1.9.3.901 X.Org Xorg Server 1.9.3.902 X.Org Xorg Server 1.9.4 X.Org Xorg Server 1.9.4.901 X.Org Xorg Server 1.9.5 X.Org Xorg Server 1.9.99.901 X.Org Xorg Server 1.9.99.902 X.Org Xorg Server 1.9.99.903 X.Org Xorg Server 1.10.0 X.Org Xorg Server 1.10.0.901 X.Org Xorg Server 1.10.0.902 X.Org Xorg Server 1.10.1 X.Org Xorg Server 1.10.1.901 X.Org Xorg Server 1.10.1.902 X.Org Xorg Server 1.10.2 X.Org Xorg Server 1.10.2.901 X.Org Xorg Server 1.10.2.902 X.Org Xorg Server 1.10.3 X.Org Xorg Server 1.10.3.901 X.Org Xorg Server 1.10.3.902 X.Org Xorg Server 1.10.4 X.Org Xorg Server 1.10.6 X.Org Xorg Server 1.10.99.901 X.Org Xorg Server 1.10.99.902 X.Org Xorg Server 1.11.0 X.Org Xorg Server 1.11.1 X.Org Xorg Server 1.11.1.901 X.Org Xorg Server 1.11.1.902 X.Org Xorg Server 1.11.2 X.Org Xorg Server 1.11.2.901 X.Org Xorg Server 1.11.2.902 X.Org Xorg Server 1.11.3 X.Org Xorg Server 1.11.3.901 X.Org Xorg Server 1.11.3.902 X.Org Xorg Server 1.11.4 X.Org Xorg Server 1.11.99.1 X.Org Xorg Server 1.11.99.2 X.Org Xorg Server 1.11.99.901 X.Org Xorg Server 1.11.99.902 X.Org Xorg Server 1.11.99.903 X.Org Xorg Server 1.12.0 X.Org Xorg Server 1.12.0.901 X.Org Xorg Server 1.12.0.902 X.Org Xorg Server 1.12.1.901 X.Org Xorg Server 1.12.1.902 X.Org Xorg Server 1.12.2 X.Org Xorg Server 1.12.2.901 X.Org Xorg Server 1.12.2.902 X.Org Xorg Server 1.12.3 X.Org Xorg Server 1.12.3.901 X.Org Xorg Server 1.12.3.902 X.Org Xorg Server 1.12.4 X.Org Xorg Server 1.12.99.901 X.Org Xorg Server 1.12.99.902 X.Org Xorg Server 1.12.99.903 X.Org Xorg Server 1.12.99.904 X.Org Xorg Server 1.12.99.905 X.Org Xorg Server 1.13.0 X.Org Xorg Server 1.13.0.901 X.Org Xorg Server 1.13.0.902 X.Org Xorg Server 1.13.1 X.Org Xorg Server 1.13.1.901 X.Org Xorg Server 1.13.2 X.Org Xorg Server 1.13.2.901 X.Org Xorg Server 1.13.2.902 X.Org Xorg Server 1.13.3 X.Org Xorg Server 1.13.4 X.Org Xorg Server 1.13.99.901 X.Org Xorg Server 1.13.99.902 X.Org Xorg Server 1.14.0 X.Org Xorg Server 1.14.1 X.Org Xorg Server 1.14.1.901 X.Org Xorg Server 1.14.1.902 X.Org Xorg Server 1.14.2 X.Org Xorg Server 1.14.2.901 X.Org Xorg Server 1.14.2.902 X.Org Xorg Server 1.14.3 X.Org Xorg Server 1.14.3.901 X.Org Xorg Server 1.14.4 X.Org Xorg Server 1.14.4.901 X.Org Xorg Server 1.14.5 X.Org Xorg Server 1.14.5.901 X.Org Xorg Server 1.14.6 X.Org Xorg Server 1.14.7 X.Org Xorg Server 1.14.99.1 X.Org Xorg Server 1.14.99.2 X.Org Xorg Server 1.14.99.3 X.Org Xorg Server 1.14.99.901 X.Org Xorg Server 1.14.99.902 X.Org Xorg Server 1.14.99.903 X.Org Xorg Server 1.14.99.904 X.Org Xorg Server 1.14.99.905 X.Org Xorg Server 1.15.0 X.Org Xorg Server 1.15.0.901 X.Org Xorg Server 1.15.1 X.Org Xorg Server 1.15.2 X.Org Xorg Server 1.15.99.901 X.Org Xorg Server 1.15.99.902 X.Org Xorg Server 1.15.99.903 X.Org Xorg Server 1.15.99.904 X.Org Xorg Server 1.16.0 X.Org Xorg Server 1.16.0.901 X.Org Xorg Server 1.16.1 X.Org Xorg Server 1.16.1.901 X.Org Xorg Server 1.16.2 X.Org Xorg Server 1.16.2.99.901 X.Org Xorg Server 1.16.2.901 X.Org Xorg Server 1.16.3 X.Org Xorg Server 1.17.0 X.Org Xorg Server 1.19.3 X.Org Xorg Server 1.19.4 X.Org Xorg Server 1.19.5 X.Org Xorg Server 1.19.6 X.Org Xorg Server 1.19.7 X.Org Xorg Server 1.19.99.901 X.Org Xorg Server 1.19.99.902 X.Org Xorg Server 1.19.99.903 X.Org Xorg Server 1.19.99.904 X.Org Xorg Server 1.19.99.905 X.Org Xorg Server 1.20.0 X.Org Xorg Server 1.20.1 X.Org Xorg Server 1.20.2 X.Org Xorg Server 1.20.3 X.Org Xorg Server 1.20.4 X.Org Xorg Server 1.20.5 X.Org Xorg Server 1.20.6 X.Org Xorg Server 1.20.7 X.Org Xorg Server 1.20.8 X.Org Xorg Server 1.20.9 X.Org Xorg Server 21.1.0 X.Org Xorg Server 21.1.8	183
OS	Fedoraproject Fedoraproject Fedora 39	1
OS	Redhat Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0	3
OS	Debian Debian Debian Linux 10.0	1

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References