First published: Wed Dec 06 2023(Updated: )
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.
Credit: secalert@redhat.com secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/xorg-server | <21.1.10 | 21.1.10 |
redhat/xwayland | <23.2.3 | 23.2.3 |
ubuntu/xorg-server | <2:1.18.4-0ubuntu0.12+ | 2:1.18.4-0ubuntu0.12+ |
ubuntu/xorg-server | <2:1.19.6-1ubuntu4.15+ | 2:1.19.6-1ubuntu4.15+ |
ubuntu/xorg-server | <21.1.10 | 21.1.10 |
ubuntu/xorg-server | <2:1.20.13-1ubuntu1~20.04.12 | 2:1.20.13-1ubuntu1~20.04.12 |
ubuntu/xorg-server | <2:21.1.4-2ubuntu1.7~22.04.5 | 2:21.1.4-2ubuntu1.7~22.04.5 |
ubuntu/xorg-server | <2:21.1.7-1ubuntu3.4 | 2:21.1.7-1ubuntu3.4 |
ubuntu/xorg-server | <2:21.1.7-3ubuntu2.4 | 2:21.1.7-3ubuntu2.4 |
ubuntu/xwayland | <23.2.3 | 23.2.3 |
ubuntu/xwayland | <2:22.1.1-1ubuntu0.9 | 2:22.1.1-1ubuntu0.9 |
ubuntu/xwayland | <2:22.1.8-1ubuntu1.3 | 2:22.1.8-1ubuntu1.3 |
ubuntu/xwayland | <2:23.2.0-1ubuntu0.3 | 2:23.2.0-1ubuntu0.3 |
All of | ||
X.Org X Server | <21.1.10 | |
Any of | ||
Redhat Enterprise Linux | =6.0 | |
Redhat Enterprise Linux | =7.0 | |
Redhat Enterprise Linux | =8.0 | |
Redhat Enterprise Linux | =9.0 | |
All of | ||
X.org Xwayland | <23.2.3 | |
Any of | ||
Redhat Enterprise Linux | =8.0 | |
Redhat Enterprise Linux | =9.0 | |
Redhat Enterprise Linux Eus | =9.2 | |
Debian Debian Linux | =10.0 | |
Debian Debian Linux | =11.0 | |
Debian Debian Linux | =12.0 | |
All of | ||
Tigervnc Tigervnc | ||
Any of | ||
Redhat Enterprise Linux | =6.0 | |
Redhat Enterprise Linux | =7.0 | |
Redhat Enterprise Linux | =8.0 | |
Redhat Enterprise Linux | =9.0 | |
debian/xorg-server | <=2:1.20.4-1+deb10u4<=2:1.20.11-1+deb11u6<=2:21.1.7-3+deb12u2 | 2:1.20.4-1+deb10u13 2:1.20.11-1+deb11u11 2:21.1.7-3+deb12u5 2:21.1.11-2 |
debian/xwayland | <=2:22.1.9-1 | 2:23.2.4-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.