Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2023-6478

HistoryDec 13, 2023 - 7:15 a.m.

CVE-2023-6478

2023-12-1307:15:31

Debian Security Bug Tracker

security-tracker.debian.org

xorg-server

integer overflow

sensitive information

disclosure

rrchangeproviderproperty

rrchangeoutputproperty

6.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

OSVersionArchitecturePackageVersionFilename
Debian12allxorg-server< 2:21.1.7-3+deb12u3xorg-server_2:21.1.7-3+deb12u3_all.deb
Debian11allxorg-server< 2:1.20.11-1+deb11u9xorg-server_2:1.20.11-1+deb11u9_all.deb
Debian10allxorg-server< 2:1.20.4-1+deb10u11xorg-server_2:1.20.4-1+deb10u11_all.deb
Debian999allxorg-server< 2:21.1.10-1xorg-server_2:21.1.10-1_all.deb
Debian13allxorg-server< 2:21.1.10-1xorg-server_2:21.1.10-1_all.deb
Debian12allxwayland<= 2:22.1.9-1xwayland_2:22.1.9-1_all.deb
Debian999allxwayland< 2:23.2.3-1xwayland_2:23.2.3-1_all.deb
Debian13allxwayland< 2:23.2.3-1xwayland_2:23.2.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	xorg-server	< 2:21.1.7-3+deb12u3	xorg-server_2:21.1.7-3+deb12u3_all.deb
Debian	11	all	xorg-server	< 2:1.20.11-1+deb11u9	xorg-server_2:1.20.11-1+deb11u9_all.deb
Debian	10	all	xorg-server	< 2:1.20.4-1+deb10u11	xorg-server_2:1.20.4-1+deb10u11_all.deb
Debian	999	all	xorg-server	< 2:21.1.10-1	xorg-server_2:21.1.10-1_all.deb
Debian	13	all	xorg-server	< 2:21.1.10-1	xorg-server_2:21.1.10-1_all.deb
Debian	12	all	xwayland	<= 2:22.1.9-1	xwayland_2:22.1.9-1_all.deb
Debian	999	all	xwayland	< 2:23.2.3-1	xwayland_2:23.2.3-1_all.deb
Debian	13	all	xwayland	< 2:23.2.3-1	xwayland_2:23.2.3-1_all.deb