Lucene search

K
redosRedosROS-20231114-02
HistoryNov 14, 2023 - 12:00 a.m.

ROS-20231114-02

2023-11-1400:00:00
redos.red-soft.ru
11
xorg-server
memory buffer overflow
memory usage
denial of service
privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

Vulnerability of XIChangeDeviceProperty (Xi/xiproperty.c) and RRChangeOutputProperty functions
(randr/rrrproperty.c) of X Window System Xorg-server is related to the possibility of writing outside the boundaries of the
buffer in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service or
escalate privileges

Vulnerability of DamageDestroy function of xorg-x11-server package is related to memory usage after its
freeing. Exploitation of the vulnerability could allow an attacker to escalate privileges or cause a denial of service.
denial of service

Vulnerability of DestroyWindow function of xorg-x11-server package is related to memory usage after its release.
freeing. Exploitation of the vulnerability could allow an attacker to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64xorg-x11-server-xorg<= 1.20.14-7UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%