CVE-2023-6816: Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
Other sources
Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255 but the X.Org Server was only allocating space for the device's number of buttons, leading to a heap overflow if a bigger value was used.
— Red Hat
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/xorg-serverto a version that resolves this vulnerability.Fixed in 21.1.11 - Upgrade
Upgrade
redhat/xwaylandto a version that resolves this vulnerability.Fixed in 23.2.4 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.7-3+deb12u12Fixed in 2:21.1.7-3+deb12u13Fixed in 2:21.1.16-1.3+deb13u3Fixed in 2:21.1.16-1.3+deb13u4Fixed in 2:21.1.25-2 - Upgrade
Upgrade
debian/xwaylandto a version that resolves this vulnerability.Fixed in 2:24.1.6-1Fixed in 2:24.1.14-1 - Upgrade
Upgrade
alpine/xorg-serverto a version that resolves this vulnerability.Fixed in 21.1.11-r0 - Upgrade
Upgrade
alpine/xwaylandto a version that resolves this vulnerability.Fixed in 23.2.4-r0 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.7-3+deb12u5 - Upgrade
Upgrade
debian/xorg-serverto a version that resolves this vulnerability.Fixed in 2:21.1.11-1 - Upgrade
Upgrade
debian/xwaylandto a version that resolves this vulnerability.Fixed in 2:23.2.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6816?
CVE-2023-6816 has been classified with a moderate severity rating.
How do I fix CVE-2023-6816?
To fix CVE-2023-6816, upgrade to xorg-server version 21.1.11 or xwayland version 23.2.4 or later.
What software does CVE-2023-6816 affect?
CVE-2023-6816 affects xorg-server and xwayland on specific versions of Red Hat and Debian systems.
What type of vulnerability is CVE-2023-6816?
CVE-2023-6816 is a flaw that allows for arbitrary button mapping in the X.Org server.
Is there a patch available for CVE-2023-6816?
Yes, patches have been released for the affected versions of xorg-server and xwayland.