CVEvulnerability
CVE-2023-5380
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-25
- Last modified
- 2026-06-23
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-416
Description
A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.
Affected configurations
• x.org x server (< 21.1.9)
• x.org xwayland (< 23.2.2)
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• fedoraproject fedora 37
• fedoraproject fedora 38
• fedoraproject fedora 39
• debian debian linux 11.0
• debian debian linux 12.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://access.redhat.com/errata/RHSA-2023:7428 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:2169 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2298 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2995 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:3067 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2023-5380 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2244736 Issue Tracking
- https://lists.x.org/archives/xorg-announce/2023-October/003430.html Patch, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:7428 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:2169 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2298 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:2995 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:3067 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2023-5380 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2244736 Issue Tracking
- https://lists.debian.org/debian-lts-announce/2023/10/msg00036.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/2WS5E7H4A5J3U5YBCTMRPQVGWK5LVH7D/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/3RK66CXMXO3PCPDU3GDY5FK4UYHUXQJT/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/AKKIE626TZOOPD533EYN47J4RFNHZVOP/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HO2Q2NP6R62ZRQQG3XQ4AXUT7J2EKKKY/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/SN6KV4XGQJRVAOSM5C3CWMVAXO53COIP/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/TJXNI4BXURC2BKPNAHFJK3C5ZETB7PER/ lists.fedoraproject.org
- https://lists.x.org/archives/xorg-announce/2023-October/003430.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202401-30 security.gentoo.org
- https://security.netapp.com/advisory/ntap-20231130-0004/ security.netapp.com
- https://www.debian.org/security/2023/dsa-5534 www.debian.org