ELSA-2023-6802

Опубликовано: 08 нояб. 2023

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2023-6802: xorg-x11-server security update (IMPORTANT)

[1.20.4-24]

CVE fix for: CVE-2023-5367 Resolves: https://issues.redhat.com/browse/RHEL-13424

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

xorg-x11-server-Xdmx

1.20.4-24.el7_9

xorg-x11-server-Xephyr

1.20.4-24.el7_9

xorg-x11-server-Xnest

1.20.4-24.el7_9

xorg-x11-server-Xorg

1.20.4-24.el7_9

xorg-x11-server-Xvfb

1.20.4-24.el7_9

xorg-x11-server-Xwayland

1.20.4-24.el7_9

xorg-x11-server-common

1.20.4-24.el7_9

xorg-x11-server-devel

1.20.4-24.el7_9

xorg-x11-server-source

1.20.4-24.el7_9

Oracle Linux x86_64

xorg-x11-server-Xdmx

1.20.4-24.el7_9

xorg-x11-server-Xephyr

1.20.4-24.el7_9

xorg-x11-server-Xnest

1.20.4-24.el7_9

xorg-x11-server-Xorg

1.20.4-24.el7_9

xorg-x11-server-Xvfb

1.20.4-24.el7_9

xorg-x11-server-Xwayland

1.20.4-24.el7_9

xorg-x11-server-common

1.20.4-24.el7_9

xorg-x11-server-devel

1.20.4-24.el7_9

xorg-x11-server-source

1.20.4-24.el7_9

Связанные CVE

CVE-2023-5367

Ссылки на источники

Связанные уязвимости

CVE-2023-5367

CVSS3: 7.8

ubuntu

почти 2 года назад

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.