CVE-2023-6478

Related Files

Ubuntu Security Notice USN-6587-5

Posted Mar 14, 2024

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6587-5 - USN-6587-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 LTS. Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when processing the RRChangeOutputProperty and RRChangeProviderProperty APIs. An attacker could possibly use this issue to cause the X Server to crash, or obtain sensitive information.

tags | advisory, vulnerability

systems | linux, ubuntu

advisories | CVE-2023-6478, CVE-2023-6816, CVE-2024-0229, CVE-2024-0408, CVE-2024-0409, CVE-2024-21885, CVE-2024-21886

SHA-256 | 9f02a5fba82a37e9433c20a481152b829c57eaf4483d36e161436fe7547bf8f0

Download | Favorite | View

Gentoo Linux Security Advisory 202401-30

Posted Jan 31, 2024

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202401-30 - Multiple vulnerabilities have been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation or remote code execution. Versions greater than or equal to 21.1.11 are affected.

tags | advisory, remote, vulnerability, code execution

systems | linux, gentoo

advisories | CVE-2023-5367, CVE-2023-5380, CVE-2023-6377, CVE-2023-6478, CVE-2023-6816, CVE-2024-0229, CVE-2024-0408, CVE-2024-0409, CVE-2024-21885, CVE-2024-21886

SHA-256 | 545eafd3a0b182303f26482ca1690edf1334c8c351327115bef40159e3e46634

Download | Favorite | View

Ubuntu Security Notice USN-6555-2

Posted Dec 14, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6555-2 - USN-6555-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled XKB button actions. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges.

tags | advisory, arbitrary, vulnerability

systems | linux, ubuntu

advisories | CVE-2023-6377, CVE-2023-6478

SHA-256 | 47dd680a597c860005fcb5faa12fa286b608ad37685f4dcde9e7e3d72589df43

Download | Favorite | View

Ubuntu Security Notice USN-6555-1

Posted Dec 14, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6555-1 - Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled XKB button actions. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when processing the RRChangeOutputProperty and RRChangeProviderProperty APIs. An attacker could possibly use this issue to cause the X Server to crash, or obtain sensitive information.

tags | advisory, arbitrary

systems | linux, ubuntu

advisories | CVE-2023-6377, CVE-2023-6478

SHA-256 | 863c07bd808ab957e6fd16cdd167d2b0776d0a5422b1772f41e19758588b5ead

Download | Favorite | View

Debian Security Advisory 5576-1

Posted Dec 13, 2023

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5576-1 - Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2023-6377, CVE-2023-6478

SHA-256 | 02e7defbebaae0b355ce0347a45f3a3e36a998c50aabf68a9166432de62acb8b

Download | Favorite | View