ByteOS Network

NVD Vulnerability Details :

CVE-2023-5367

Modified

Source-secalert@redhat.com

Published At-25 Oct, 2023 | 20:15

Updated At-04 Aug, 2025 | 21:15

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CPE Matches

X.Org Foundation

>>x_server>>Versions before 21.1.9(exclusive)

cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*

X.Org Foundation

>>xwayland>>Versions before 23.2.2(exclusive)

cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>7.0

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>8.0

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>9.0

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_ibm_z_systems>>7.0_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_power_big_endian>>7.0_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_power_little_endian>>7.0_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_scientific_computing>>7.0

cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Fedora Project

>>fedora>>37

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Fedora Project

>>fedora>>38

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

Fedora Project

>>fedora>>39

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>11.0

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>12.0

cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Secondary	secalert@redhat.com
CWE-787	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://access.redhat.com/errata/RHSA-2023:6802	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:6808	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7373	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7388	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7405	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7428	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7436	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7526	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7533	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0010	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0128	secalert@redhat.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2169	secalert@redhat.com	N/A
https://access.redhat.com/errata/RHSA-2024:2170	secalert@redhat.com	N/A
https://access.redhat.com/errata/RHSA-2024:2995	secalert@redhat.com	N/A
https://access.redhat.com/errata/RHSA-2024:2996	secalert@redhat.com	N/A
https://access.redhat.com/errata/RHSA-2025:12751	secalert@redhat.com	N/A
https://access.redhat.com/security/cve/CVE-2023-5367	secalert@redhat.com	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2243091	secalert@redhat.com	Issue Tracking Third Party Advisory
https://lists.x.org/archives/xorg-announce/2023-October/003430.html	secalert@redhat.com	Patch Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:6802	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:6808	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7373	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7388	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7405	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7428	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7436	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7526	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7533	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0010	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0128	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2169	af854a3a-2127-422b-91ae-364da2661108	N/A
https://access.redhat.com/errata/RHSA-2024:2170	af854a3a-2127-422b-91ae-364da2661108	N/A
https://access.redhat.com/errata/RHSA-2024:2995	af854a3a-2127-422b-91ae-364da2661108	N/A
https://access.redhat.com/errata/RHSA-2024:2996	af854a3a-2127-422b-91ae-364da2661108	N/A
https://access.redhat.com/security/cve/CVE-2023-5367	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2243091	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WS5E7H4A5J3U5YBCTMRPQVGWK5LVH7D/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3RK66CXMXO3PCPDU3GDY5FK4UYHUXQJT/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YBK3I6SETHETBHDETFWM3VSZUQICIDV/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AKKIE626TZOOPD533EYN47J4RFNHZVOP/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO2Q2NP6R62ZRQQG3XQ4AXUT7J2EKKKY/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L2RMNR4235YXZZQ2X7Q4MTOZDMZ7BBQU/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEDJN4VFN57K5POOC7BNVD6L6WUUCSG6/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SN6KV4XGQJRVAOSM5C3CWMVAXO53COIP/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJXNI4BXURC2BKPNAHFJK3C5ZETB7PER/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.x.org/archives/xorg-announce/2023-October/003430.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://security.gentoo.org/glsa/202401-30	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.netapp.com/advisory/ntap-20231130-0004/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.debian.org/security/2023/dsa-5534	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History