Lucene search

K
redhatRedHatRHSA-2024:0009
HistoryJan 02, 2024 - 6:50 a.m.

(RHSA-2024:0009) Important: xorg-x11-server security update

2024-01-0206:50:54
access.redhat.com
41
x.org
low-level functionality
security fix
out-of-bounds memory
xkb button actions
rrchangeoutputproperty
rrchangeproviderproperty
cve-2023-6377
cve-2023-6478
cvss score
references.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.16

Percentile

96.1%

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

  • xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)

  • xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.16

Percentile

96.1%