Vulnerability Intelligence Report
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
CVE-2023-6816
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:2.11%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-787 ↗Out-of-bounds Write
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | 0:1.1.0-25.el6_10.13 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 7 | 0:1.20.4-27.el7_9 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 7 | 0:1.8.0-31.el7_9 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8 | 0:1.13.1-2.el8_9.7 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8 | 0:1.20.11-22.el8 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8 | 0:21.1.3-15.el8 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | 0:1.9.0-15.el8_2.9 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | 0:1.9.0-15.el8_2.9 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | 0:1.9.0-15.el8_2.9 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:1.11.0-8.el8_4.8 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | 0:1.11.0-8.el8_4.8 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | 0:1.11.0-8.el8_4.8 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | 0:1.12.0-6.el8_6.9 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 0:1.12.0-15.el8_8.7 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9 | 0:1.13.1-3.el9_3.6 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9 | 0:1.20.11-24.el9 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9 | 0:22.1.9-5.el9 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | 0:1.11.0-22.el9_0.8 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:1.12.0-14.el9_2.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 6 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.106%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2023-12-14T04:34:38 |
| Published | 2024-01-18T04:31:07 |
| Patch Date | 2024-01-16 |
| Last Updated | 2026-03-19T21:23:24 |
Community Chatter & Buzz