CVE-2023-6816

Published: Jan 18, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.

Affected (7)

Products: X.org: X Server, Xwayland · Fedoraproject: Fedora · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation · +1 more

Show all products

X.org: X Server, Xwayland · Fedoraproject: Fedora · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation · Debian: Debian Linux

2 products

1 product

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
X.org X Server	Before 21.1.11
X.org Xwayland	Before 23.2.4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 39

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (39)

https://access.redhat.com/errata/RHSA-2024:0320

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2024:0557

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0558

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0597

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0607

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0614

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0617

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0621

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0626

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:0629

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:2169

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:2170

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:2995

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:2996

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:12751

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2023-6816

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2257691

Source: secalert@redhat.com

Issue Tracking

http://www.openwall.com/lists/oss-security/2024/01/18/1

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0320

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2024:0557

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0558

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0597

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0607

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0614

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0617

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0621

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0626

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0629

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:2169

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:2170

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:2996

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/security/cve/CVE-2023-6816

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2257691

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202401-30

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20240307-0006/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.