Lucene search
K

28 matches found

AlpineLinux
AlpineLinux
added 2024/01/18 4:31 a.m.31 views

CVE-2023-6816

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leadin...

9.8CVSS9.9AI score0.03015EPSS
Exploits0
CVE
CVE
added 2024/01/18 4:31 a.m.454 views

CVE-2023-6816

The CVE-2023-6816 issue affects the X.Org Server (xorg-x11-server) and stems from a heap overflow in DeviceFocusEvent and ProcXIQueryPointer due to allocating space only for the device’s button count; extra bits (up to 255) can cause overflow when bigger values are used. This impacts X.Org Server...

9.8CVSS9.5AI score0.03015EPSS
Exploits0References24Affected Software2
Debian CVE
Debian CVE
added 2024/01/18 4:31 a.m.115 views

CVE-2023-6816

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leadin...

9.8CVSS7.5AI score0.03015EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the DeviceFocusEvent and XIQueryPointer functions in the X Window System X.Org Server implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DeviceFocusEvent and XIQueryPointer functions in the X Window System X.Org Server implementation is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its...

7.8CVSS6.7AI score0.03015EPSS
Exploits0References13Affected Software8
Tenable Nessus
Tenable Nessus
added 2024/01/18 12:0 a.m.25 views

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2024:0116-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0116-1 advisory. - A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button...

9.8CVSS6.8AI score0.03015EPSS
Exploits0References13
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.3 views

X.org Server Security Vulnerability

X.org Server is an open source free software from the X.org Foundation. A security vulnerability exists in X.org Server that stems from the server incorrectly handling memory when processing the DeviceFocusEvent and ProcXIQueryPointer APIs, which can lead to a server crash, disclosure of sensitiv...

7.8CVSS7.5AI score0.00239EPSS
Exploits0References19
UbuntuCve
UbuntuCve
added 2024/01/16 12:0 a.m.21 views

CVE-2023-6816

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leadin...

9.8CVSS6.7AI score0.03015EPSS
Exploits0References4
OSV
OSV
added 2024/01/16 12:0 a.m.1 views

UBUNTU-CVE-2023-6816

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leadin...

9.8CVSS6.8AI score0.03015EPSS
Exploits0References5
Rows per page
Query Builder