Wind River Support Network

HomeDefectsLIN1022-6012
Fixed

LIN1022-6012 : Security Advisory - xserver-xorg - CVE-2023-6478

Created: Dec 14, 2023    Updated: Feb 8, 2024
Resolved Date: Feb 8, 2024
Found In Version: 10.22.33.1
Fix Version: 10.22.33.14
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

CREATE(Triage):(User=admin) CVE-2023-6478 (https://nvd.nist.gov/vuln/detail/CVE-2023-6478)

CVEs


Live chat
Online