Every CVE Search/ Get API key

CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is...

5.3 MediumDisputed

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.39%Up 0.3 points since Mar 27, 2024
90%50%10%1%

What each source reports

CVE List Score used 5.3

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Record
CVE-2023-45919
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-126
Updated
2026-11-02
EUVDEUVD-2023-50182 5.3

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Record
EUVD-2023-50182
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-fwp2-wq2h-xqvw 5.3

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is...

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Record
GHSA-fwp2-wq2h-xqvw
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-126
Updated
2026-11-02
NVD 5.3

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Record
CVE-2023-45919
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-126
Updated
2026-11-02
OSV 5.3

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Record
CVE-2023-45919
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2023-45919 5.3

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Record
DEBIAN-CVE-2023-45919
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
Show 8 moreShow less
OSVopenSUSE-SU-2024:14475-1 No score

Mesa-24.2.6-392.1 on GA media

These are all security issues fixed in the Mesa-24.2.6-392.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14475-1
Updated
2026-11-02
OSVSUSE-SU-2024:3526-1 No score

Security update for Mesa

This update for Mesa fixes the following issues:

  • CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
  • CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
  • CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).
Record
SUSE-SU-2024:3526-1
Updated
2026-11-02
OSVSUSE-SU-2024:3540-1 No score

Security update for Mesa

This update for Mesa fixes the following issues:

  • CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)
  • CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)
  • CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)
Record
SUSE-SU-2024:3540-1
Updated
2026-11-02
OSVSUSE-SU-2024:3544-1 No score

Security update for Mesa

This update for Mesa fixes the following issues:

  • CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
  • CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
  • CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).
Record
SUSE-SU-2024:3544-1
Updated
2026-11-02
OSVSUSE-SU-2024:3548-1 No score

Security update for Mesa

This update for Mesa fixes the following issues:

  • CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)
  • CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)
  • CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)
Record
SUSE-SU-2024:3548-1
Updated
2026-11-02
OSVSUSE-SU-2025:02803-1 No score

Security update for Mesa

This update for Mesa fixes the following issues:

  • CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)
  • CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)
  • CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)
Record
SUSE-SU-2025:02803-1
Updated
2026-11-02
OSVSUSE-SU-2025:20082-1 No score

Security update for Mesa

This update for Mesa fixes the following issues:

  • CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
  • CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
  • CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042).
Record
SUSE-SU-2025:20082-1
Updated
2026-11-02
OSVSUSE-SU-2025:20664-1 No score

Security update for Mesa

This update for Mesa fixes the following issues:

  • CVE-2023-45913: NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
  • CVE-2023-45919: Buffer over-read in glXQueryServerString() (bsc#1222041).
  • CVE-2023-45922: Segmentation violation in __glXGetDrawableAttribute() (bsc#1222042).
Record
SUSE-SU-2025:20664-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mesa
Debian:12
 All versions, plus listed versions
22.3.6-1+deb12u122.3.6-1+deb12u223.0.0-123.0.0~rc1-123.0.0~rc4-1
Show 45 moreShow less
23.0.1-123.0.2-123.1.0-123.1.0~rc2-123.1.0~rc3-123.1.1-123.1.2-123.1.3-123.1.4-123.1.6-123.1.7-123.2.0~rc2-123.2.0~rc3-123.2.0~rc3-223.2.0~rc3-323.2.0~rc4-123.2.1-123.3.0-123.3.0-223.3.0~rc1-123.3.0~rc2-123.3.0~rc3-123.3.0~rc4-123.3.0~rc5-123.3.1-123.3.1-1+exp123.3.1-223.3.1-323.3.1-423.3.2-123.3.2-223.3.3-123.3.3-223.3.3-323.3.4-123.3.5-124.0.0-124.0.0-224.0.0~rc1-124.0.0~rc2-124.0.0~rc3-124.0.1-124.0.2-124.0.3-124.0.4-1
 None known
mesa
Debian:13
 All versions, plus listed versions
25.0.7-225.0.7-2+deb13u125.1.0-125.1.5-125.1.7-1
Show 45 moreShow less
25.2.0-125.2.1-125.2.1-225.2.2-125.2.3-125.2.3-1~bpo13+125.2.4-125.2.4-1~bpo13+125.2.4-1~bpo13+225.2.5-125.2.6-125.2.6-1~bpo13+125.2.7-125.2.8-125.2.8-225.3.0-125.3.0~rc1-125.3.0~rc2-125.3.0~rc4-125.3.1-125.3.2-125.3.2-225.3.3-126.0.0-126.0.0~rc3-126.0.1-126.0.1-226.0.2-126.0.3-126.0.4-126.0.5-126.0.6-126.0.7-126.0.8-126.1.0-126.1.0~rc1-126.1.0~rc2-126.1.0~rc3-126.1.2-126.1.2-1~bpo13+126.1.4-126.1.5-126.1.6-126.1.6-1~bpo13+126.2.0-1
 None known
mesa
Debian:14
 All versions, plus listed versions
25.0.7-225.1.0-125.1.5-125.1.7-125.2.0-1
Show 45 moreShow less
25.2.1-125.2.1-225.2.2-125.2.3-125.2.3-1~bpo13+125.2.4-125.2.4-1~bpo13+125.2.4-1~bpo13+225.2.5-125.2.6-125.2.6-1~bpo13+125.2.7-125.2.8-125.2.8-225.3.0-125.3.0~rc1-125.3.0~rc2-125.3.0~rc4-125.3.1-125.3.2-125.3.2-225.3.3-126.0.0-126.0.0~rc3-126.0.1-126.0.1-226.0.2-126.0.3-126.0.4-126.0.5-126.0.6-126.0.7-126.0.8-126.1.0-126.1.0~rc1-126.1.0~rc2-126.1.0~rc3-126.1.2-126.1.2-1~bpo13+126.1.4-126.1.5-126.1.6-126.1.6-1~bpo13+126.2.0-126.2.0~rc1-1
 None known
Mesa
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 3 CVEs
 before 18.3.2-14.9.1
18.3.2-14.9.1
Mesa-drivers
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 3 CVEs
 before 18.3.2-14.9.1
18.3.2-14.9.1
Mesa
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 3 CVEs
 before 18.3.2-14.9.1
18.3.2-14.9.1
Mesa-drivers
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 3 CVEs
 before 18.3.2-14.9.1
18.3.2-14.9.1
Mesa
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 3 CVEs
 before 18.3.2-14.9.1
18.3.2-14.9.1
Mesa-drivers
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 3 CVEs
 before 18.3.2-14.9.1
18.3.2-14.9.1
Mesa
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 3 CVEs
 before 18.3.2-14.9.1
18.3.2-14.9.1
Show 31 moreShow less
Affected packages
PackageAffectedFixed
Mesa-drivers
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 3 CVEs
 before 18.3.2-14.9.1
18.3.2-14.9.1
Mesa
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 23.3.4-150600.83.3.1
23.3.4-150600.83.3.1
Mesa-drivers
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 23.3.4-150600.83.3.1
23.3.4-150600.83.3.1
Mesa
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 3 CVEs
 before 23.3.4-150600.83.3.1
23.3.4-150600.83.3.1
Mesa-drivers
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 3 CVEs
 before 23.3.4-150600.83.3.1
23.3.4-150600.83.3.1
Mesa
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 23.3.4-150600.83.3.1
23.3.4-150600.83.3.1
Mesa-drivers
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 23.3.4-150600.83.3.1
23.3.4-150600.83.3.1
Mesa
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 21.2.4-150400.68.15.1
21.2.4-150400.68.15.1
Mesa
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 21.2.4-150400.68.15.1
21.2.4-150400.68.15.1
Mesa-drivers
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 3 CVEs
 before 21.2.4-150400.68.15.1
21.2.4-150400.68.15.1
Mesa-drivers
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 21.2.4-150400.68.15.1
21.2.4-150400.68.15.1
Mesa-drivers
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 3 CVEs
 before 21.2.4-150400.68.15.1
21.2.4-150400.68.15.1
Mesa-drivers
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 3 CVEs
 before 21.2.4-150400.68.15.1
21.2.4-150400.68.15.1
Mesa
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa-drivers
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa-drivers
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa-drivers
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa-drivers
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa-drivers
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa
openSUSE:Leap Micro 5.5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa-drivers
openSUSE:Leap Micro 5.5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa-drivers
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 22.3.5-150500.77.5.1
22.3.5-150500.77.5.1
Mesa
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 20.2.4-150300.59.9.1
20.2.4-150300.59.9.1
Mesa
SUSE:Linux Micro 6.0
From an advisory covering 3 CVEs
 before 23.3.4-8.1
23.3.4-8.1
Mesa-drivers
SUSE:Linux Micro 6.0
From an advisory covering 3 CVEs
 before 23.3.4-8.1
23.3.4-8.1
Mesa
SUSE:Linux Micro 6.1
From an advisory covering 3 CVEs
 before 23.3.4-slfo.1.1_2.1
23.3.4-slfo.1.1_2.1
Mesa-drivers
SUSE:Linux Micro 6.1
From an advisory covering 3 CVEs
 before 23.3.4-slfo.1.1_2.1
23.3.4-slfo.1.1_2.1
Mesa
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 24.2.6-392.1
24.2.6-392.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-45919 is a medium vulnerability (CVSS 5.3) in Mesa3d Mesa, published March 27, 2024. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile.

References

Show 14 moreShow less
This page doesn't list everything

Left out here: 144 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open