QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-5367

Back to search

CVE-2023-5367

Published: Oct 25, 2023

Modified: Nov 6, 2025

PUBLISHED

CVSS v3.1

7.8

HIGH

Description

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

VendorProductVersions

Red Hat

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION

unaffected
0:1.1.0-25.el6_10.13 - < *

Red Hat

Red Hat Enterprise Linux 7

unaffected
0:1.20.4-24.el7_9 - < *

Red Hat

Red Hat Enterprise Linux 7

unaffected
0:1.8.0-26.el7_9 - < *

Red Hat

Red Hat Enterprise Linux 8

unaffected
0:1.13.1-2.el8_9.1 - < *

Red Hat

Red Hat Enterprise Linux 8

unaffected
0:1.20.11-22.el8 - < *

Red Hat

Red Hat Enterprise Linux 8

unaffected
0:21.1.3-15.el8 - < *

Red Hat

Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions

unaffected
0:1.9.0-16.el8_1.4 - < *

Red Hat

Red Hat Enterprise Linux 8.2 Advanced Update Support

unaffected
0:1.9.0-15.el8_2.4 - < *

Red Hat

Red Hat Enterprise Linux 8.2 Telecommunications Update Service

unaffected
0:1.9.0-15.el8_2.4 - < *

Red Hat

Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

unaffected
0:1.9.0-15.el8_2.4 - < *

Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

unaffected
0:1.11.0-8.el8_4.3 - < *

Red Hat

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

unaffected
0:1.11.0-8.el8_4.3 - < *

Red Hat

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

unaffected
0:1.11.0-8.el8_4.3 - < *

Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support

unaffected
0:1.12.0-6.el8_6.4 - < *

Red Hat

Red Hat Enterprise Linux 8.8 Extended Update Support

unaffected
0:1.12.0-15.el8_8.1 - < *

Red Hat

Red Hat Enterprise Linux 9

unaffected
0:1.13.1-3.el9_3.3 - < *

Red Hat

Red Hat Enterprise Linux 9

unaffected
0:1.20.11-24.el9 - < *

Red Hat

Red Hat Enterprise Linux 9

unaffected
0:22.1.9-5.el9 - < *

Red Hat

Red Hat Enterprise Linux 9.0 Extended Update Support

unaffected
0:1.11.0-22.el9_0.3 - < *

Red Hat

Red Hat Enterprise Linux 9.2 Extended Update Support

unaffected
0:1.12.0-14.el9_2 - < *

Red Hat

Red Hat Enterprise Linux 6

All versions

Weaknesses (CWE)

CWE-787

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

RHSA-2023:6802
vendor-advisory
x_refsource_REDHAT
RHSA-2023:6808
vendor-advisory
x_refsource_REDHAT
RHSA-2023:7373
vendor-advisory
x_refsource_REDHAT
RHSA-2023:7388
vendor-advisory
x_refsource_REDHAT
RHSA-2023:7405
vendor-advisory
x_refsource_REDHAT
RHSA-2023:7428
vendor-advisory
x_refsource_REDHAT
RHSA-2023:7436
vendor-advisory
x_refsource_REDHAT
RHSA-2023:7526
vendor-advisory
x_refsource_REDHAT
RHSA-2023:7533
vendor-advisory
x_refsource_REDHAT
RHSA-2024:0010
vendor-advisory
x_refsource_REDHAT
RHSA-2024:0128
vendor-advisory
x_refsource_REDHAT
RHSA-2024:2169
vendor-advisory
x_refsource_REDHAT
RHSA-2024:2170
vendor-advisory
x_refsource_REDHAT
RHSA-2024:2995
vendor-advisory
x_refsource_REDHAT
RHSA-2024:2996
vendor-advisory
x_refsource_REDHAT
RHSA-2025:12751
vendor-advisory
x_refsource_REDHAT
RHBZ#2243091
issue-tracking
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now