Every CVE Search/ Get API key

CVE-2023-5367

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

7.8 HighFix available

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.61%Up 0.6 points since Oct 26, 2023
90%50%10%1%

What each source reports

CVE List Score used 7.8

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
CVE-2023-5367
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-04
EUVDEUVD-2023-57683 7.8

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
EUVD-2023-57683
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-q38f-wwqq-rr3v 7.8

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an...

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
GHSA-q38f-wwqq-rr3v
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
NVD 7.8

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
CVE-2023-5367
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-04
OSVALPINE-CVE-2023-5367 7.8

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
ALPINE-CVE-2023-5367
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-31720 7.8

CVE-2023-5367 affecting package xorg-x11-server for versions less than 1.20.10-10

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
AZL-31720
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 41 moreShow less
OSVAZL-44724 7.8

CVE-2023-5367 affecting package xorg-x11-server 1.20.10-6

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
AZL-44724
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVBELL-CVE-2023-5367 7.8
Record
BELL-CVE-2023-5367
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
CVE-2023-5367
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-5367 7.8

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
DEBIAN-CVE-2023-5367
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVOESA-2023-1795 7.8

xorg-x11-server security update

X.Org X11 X server

Security Fix(es):

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.(CVE-2023-5367)

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.(CVE-2023-5380)

Record
OESA-2023-1795
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:6802 7.8

Red Hat Security Advisory: xorg-x11-server security update

Record
RHSA-2023:6802
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:6808 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2023:6808
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7373 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2023:7373
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7388 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2023:7388
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7405 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2023:7405
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7428 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2023:7428
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7436 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2023:7436
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7526 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2023:7526
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7533 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2023:7533
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:0010 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2024:0010
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:0128 7.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2024:0128
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:2169 9.8

Red Hat Security Advisory: xorg-x11-server security update

Record
RHSA-2024:2169
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:2170 9.8

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2024:2170
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:2995 9.8

Red Hat Security Advisory: xorg-x11-server security update

Record
RHSA-2024:2995
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:2996 9.8

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2024:2996
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12751 9.8

Red Hat Security Advisory: tigervnc security update

Record
RHSA-2025:12751
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-5367 7.8

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

Record
UBUNTU-CVE-2023-5367
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2024:0010 No score

Important: tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

  • xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
  • xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
  • xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:0010
Updated
2026-11-02
OSVALSA-2024:2169 No score

Moderate: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

  • xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
  • xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
  • xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
  • xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
  • xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
  • xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
  • xorg-x11-server: SELinux context corruption (CVE-2024-0409)
  • xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
  • xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
  • xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2169
Updated
2026-11-02
OSVALSA-2024:2170 No score

Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
  • xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
  • xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
  • xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
  • xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
  • xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
  • xorg-x11-server: SELinux context corruption (CVE-2024-0409)
  • xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
  • xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2170
Updated
2026-11-02
OSVALSA-2024:2995 No score

Moderate: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

  • xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
  • xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
  • xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
  • xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
  • xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
  • xorg-x11-server: SELinux context corruption (CVE-2024-0409)
  • xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
  • xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
  • xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2995
Updated
2026-11-05
OSVALSA-2024:2996 No score

Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
  • xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
  • xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
  • xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
  • xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
  • xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
  • xorg-x11-server: SELinux context corruption (CVE-2024-0409)
  • xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
  • xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2996
Updated
2026-11-02
OSVCLSA-2025-1744213437 No score

tigervnc: Fix of 3 CVEs

  • CVE-2023-6816: xorg-x11-server: fix use-after-free issue by adding check to allocate sufficient space for logical button maps to prevent heap overflow in DeviceFocusEvent and XIQueryPointer replies
  • CVE-2023-5367: xorg-x11-server: correct buffer offset handling in XIChangeDeviceProperty and RRChangeOutputProperty to prevent out-of-bound writes during append/prepend operations
  • CVE-2023-6478: xorg-x11-server: fix integer overflow in RRChangeProviderProperty and RRChangeOutputProperty to prevent disclosure of sensitive information
Record
CLSA-2025-1744213437
Updated
2026-11-02
OSVCLSA-2025-1764027165 No score

xorg-x11-server-Xwayland: Fix of 3 CVEs

  • CVE-2024-21886: fix heap overflow caused by incorrect DisableDevice() recursion
  • CVE-2024-31083: fix use-after-free caused by incorrect glyph reuse handling
  • CVE-2023-5367: fix out-of-bounds write in property append/prepend handling
Record
CLSA-2025-1764027165
Updated
2026-11-02
OSVMGASA-2023-0307 No score

Updated x11-server packages fix security vulnerabilities

The updated packages fix security vulnerabilities:

OOB write in XIChangeDeviceProperty/RRChangeOutputProperty. (CVE-2023-5367)

Use-after-free bug in DestroyWindow. (CVE-2023-5380)

Use-after-free bug in DamageDestroy. (CVE-2023-5574)

Record
MGASA-2023-0307
Updated
2026-11-02
OSVMGASA-2023-0321 No score

Updated tigervnc packages fix security vulnerabilities

The updated packages fix security vulnerabilities:

OOB write in XIChangeDeviceProperty/RRChangeOutputProperty. (CVE-2023-5367)

Use-after-free bug in DestroyWindow. (CVE-2023-5380)

Record
MGASA-2023-0321
Updated
2026-11-02
OSVopenSUSE-SU-2024:13361-1 No score

xorg-x11-server-21.1.9-1.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13361-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13362-1 No score

xwayland-23.2.2-1.1 on GA media

These are all security issues fixed in the xwayland-23.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13362-1
Updated
2026-11-02
OSVSUSE-SU-2023:4269-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
  • CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
  • CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
Record
SUSE-SU-2023:4269-1
Updated
2026-11-02
OSVSUSE-SU-2023:4272-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
  • CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
  • CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
Record
SUSE-SU-2023:4272-1
Updated
2026-11-02
OSVSUSE-SU-2023:4292-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
  • CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
  • CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
Record
SUSE-SU-2023:4292-1
Updated
2026-11-02
OSVSUSE-SU-2023:4293-1 No score

Security update for xwayland

This update for xwayland fixes the following issues:

  • CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
  • CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
Record
SUSE-SU-2023:4293-1
Updated
2026-11-02
OSVSUSE-SU-2023:4306-1 No score

Security update for xwayland

This update for xwayland fixes the following issues:

  • CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
  • CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
Record
SUSE-SU-2023:4306-1
Updated
2026-11-02
OSVSUSE-SU-2023:4338-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
  • CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
  • CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).
Record
SUSE-SU-2023:4338-1
Updated
2026-11-02
OSVUSN-6453-1 No score

xorg-server, xwayland vulnerabilities

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled prepending values to certain properties. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-5367)

Sri discovered that the X.Org X Server incorrectly handled detroying windows in certain legacy multi-screen setups. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-5380)

Record
USN-6453-1
Updated
2026-11-02
OSVUSN-6453-2 No score

xorg-server vulnerabilities

USN-6453-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled prepending values to certain properties. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-5367)

Sri discovered that the X.Org X Server incorrectly handled detroying windows in certain legacy multi-screen setups. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-5380)

Record
USN-6453-2
Updated
2026-11-02

Affected products

Show 16 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
xorg-server
Alpine:v3.18
 before 21.1.9-r0
21.1.9-r0
xorg-server
Alpine:v3.19
 before 21.1.9-r0
21.1.9-r0
xorg-server
Alpine:v3.20
 before 21.1.9-r0
21.1.9-r0
xorg-server
Alpine:v3.21
 before 21.1.9-r0
21.1.9-r0
xorg-server
Alpine:v3.22
 before 21.1.9-r0
21.1.9-r0
xorg-server
Alpine:v3.23
 before 21.1.9-r0
21.1.9-r0
xorg-server
Alpine:v3.24
 before 21.1.9-r0
21.1.9-r0
xwayland
Alpine:v3.18
 before 23.1.2-r1
23.1.2-r1
xwayland
Alpine:v3.19
 before 23.2.2-r0
23.2.2-r0
xwayland
Alpine:v3.20
 before 23.2.2-r0
23.2.2-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
xwayland
Alpine:v3.21
 before 23.2.2-r0
23.2.2-r0
xwayland
Alpine:v3.22
 before 23.2.2-r0
23.2.2-r0
xwayland
Alpine:v3.23
 before 23.2.2-r0
23.2.2-r0
xwayland
Alpine:v3.24
 before 23.2.2-r0
23.2.2-r0
tigervnc
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.13.1-3.el9_3.3.alma.1
1.13.1-3.el9_3.3.alma.1
tigervnc-icons
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.13.1-3.el9_3.3.alma.1
1.13.1-3.el9_3.3.alma.1
tigervnc-license
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.13.1-3.el9_3.3.alma.1
1.13.1-3.el9_3.3.alma.1
tigervnc-selinux
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.13.1-3.el9_3.3.alma.1
1.13.1-3.el9_3.3.alma.1
tigervnc-server
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.13.1-3.el9_3.3.alma.1
1.13.1-3.el9_3.3.alma.1
tigervnc-server-minimal
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.13.1-3.el9_3.3.alma.1
1.13.1-3.el9_3.3.alma.1
tigervnc-server-module
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.13.1-3.el9_3.3.alma.1
1.13.1-3.el9_3.3.alma.1
xorg-x11-server-Xdmx
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1.20.11-24.el9
1.20.11-24.el9
xorg-x11-server-Xephyr
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1.20.11-24.el9
1.20.11-24.el9
xorg-x11-server-Xnest
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1.20.11-24.el9
1.20.11-24.el9
xorg-x11-server-Xorg
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1.20.11-24.el9
1.20.11-24.el9
xorg-x11-server-Xvfb
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1.20.11-24.el9
1.20.11-24.el9
xorg-x11-server-common
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1.20.11-24.el9
1.20.11-24.el9
xorg-x11-server-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1.20.11-24.el9
1.20.11-24.el9
xorg-x11-server-source
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1.20.11-24.el9
1.20.11-24.el9
xorg-x11-server-Xwayland
AlmaLinux:9
From an advisory covering 9 CVEs
 before 22.1.9-5.el9
22.1.9-5.el9
xorg-x11-server-Xdmx
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.20.11-22.el8
1.20.11-22.el8
xorg-x11-server-Xephyr
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.20.11-22.el8
1.20.11-22.el8
xorg-x11-server-Xnest
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.20.11-22.el8
1.20.11-22.el8
xorg-x11-server-Xorg
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.20.11-22.el8
1.20.11-22.el8
xorg-x11-server-Xvfb
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.20.11-22.el8
1.20.11-22.el8
xorg-x11-server-common
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.20.11-22.el8
1.20.11-22.el8
xorg-x11-server-devel
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.20.11-22.el8
1.20.11-22.el8
xorg-x11-server-source
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.20.11-22.el8
1.20.11-22.el8
xorg-x11-server-Xwayland
AlmaLinux:8
From an advisory covering 9 CVEs
 before 21.1.3-15.el8
21.1.3-15.el8
xorg-x11-server
Azure Linux:2
 before 1.20.10-10
1.20.10-10
xorg-x11-server
Azure Linux:3
 through 1.20.10-6 None known
xorg-server
Alpaquita:23
 21.1.4-r1 up to 21.1.12-r0
21.1.12-r0
xorg-server
Alpaquita:stream
 21.1.4-r1 up to 21.1.9-r0
21.1.9-r0
tigervnc
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 1.12.0-13.el9_2.tuxcare.els9
1.12.0-13.el9_2.tuxcare.els9
tigervnc-icons
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 1.12.0-13.el9_2.tuxcare.els9
1.12.0-13.el9_2.tuxcare.els9
tigervnc-license
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 1.12.0-13.el9_2.tuxcare.els9
1.12.0-13.el9_2.tuxcare.els9
tigervnc-selinux
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 1.12.0-13.el9_2.tuxcare.els9
1.12.0-13.el9_2.tuxcare.els9
tigervnc-server
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 1.12.0-13.el9_2.tuxcare.els9
1.12.0-13.el9_2.tuxcare.els9
tigervnc-server-minimal
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 1.12.0-13.el9_2.tuxcare.els9
1.12.0-13.el9_2.tuxcare.els9
tigervnc-server-module
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 1.12.0-13.el9_2.tuxcare.els9
1.12.0-13.el9_2.tuxcare.els9
xorg-x11-server-Xwayland
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 21.1.3-7.el9.tuxcare.els11
21.1.3-7.el9.tuxcare.els11
xorg-x11-server-Xwayland-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 21.1.3-7.el9.tuxcare.els11
21.1.3-7.el9.tuxcare.els11
xorg-server
Debian:12
 before 2:21.1.7-3+deb12u2, plus listed versions
2:21.1.7-32:21.1.7-3+deb12u1
2:21.1.7-3+deb12u2
xorg-server
Debian:13
 before 2:21.1.9-1
2:21.1.9-1
xorg-server
Debian:14
 before 2:21.1.9-1
2:21.1.9-1
xwayland
Debian:12
 All versions, plus listed versions
2:22.1.9-12:23.1.0-12:23.1.1-12:23.2.0-12:23.2.1-1
Show 20 moreShow less
2:23.2.2-12:23.2.3-12:23.2.4-12:23.2.6-12:24.0.99.901-12:24.1.0-12:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.14-12:24.1.2-12:24.1.3-12:24.1.4-12:24.1.4-22:24.1.4-32:24.1.5-12:24.1.6-12:24.1.8-12:24.1.9-1
 None known
xwayland
Debian:13
 before 2:23.2.2-1
2:23.2.2-1
xwayland
Debian:14
 before 2:23.2.2-1
2:23.2.2-1
xorg-server
Debian:10
From an advisory covering 2 CVEs
 before 2:1.20.4-1+deb10u10, plus listed versions
2:1.20.4-12:1.20.4-1+deb10u12:1.20.4-1+deb10u22:1.20.4-1+deb10u32:1.20.4-1+deb10u4
Show 5 moreShow less
2:1.20.4-1+deb10u52:1.20.4-1+deb10u62:1.20.4-1+deb10u72:1.20.4-1+deb10u82:1.20.4-1+deb10u9
2:1.20.4-1+deb10u10
xorg-server
Debian:11
From an advisory covering 2 CVEs
 before 2:1.20.11-1+deb11u8, plus listed versions
2:1.20.11-12:1.20.11-1+deb11u12:1.20.11-1+deb11u22:1.20.11-1+deb11u32:1.20.11-1+deb11u42:1.20.11-1+deb11u52:1.20.11-1+deb11u62:1.20.11-1+deb11u7
2:1.20.11-1+deb11u8
xorg-server
Debian:12
From an advisory covering 2 CVEs
 before 2:21.1.7-3+deb12u2, plus listed versions
2:21.1.7-32:21.1.7-3+deb12u1
2:21.1.7-3+deb12u2
x11-server
Mageia:8
From an advisory covering 3 CVEs
 before 1.20.14-4.4.mga8
1.20.14-4.4.mga8
x11-server
Mageia:9
From an advisory covering 3 CVEs
 before 21.1.8-7.1.mga9
21.1.8-7.1.mga9
x11-server-xwayland
Mageia:9
From an advisory covering 3 CVEs
 before 22.1.9-1.1.mga9
22.1.9-1.1.mga9
tigervnc
Mageia:8
From an advisory covering 2 CVEs
 before 1.11.0-4.4.mga8
1.11.0-4.4.mga8
tigervnc
Mageia:9
From an advisory covering 2 CVEs
 before 1.13.1-2.1.mga9
1.13.1-2.1.mga9
xorg-x11-server
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 1.20.8-21.oe1
1.20.8-21.oe1
xorg-x11-server
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 1.20.8-22.oe1
1.20.8-22.oe1
xorg-x11-server
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 1.20.11-23.oe2203sp2
1.20.11-23.oe2203sp2
xorg-x11-server
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 1.20.11-23.oe2203sp1
1.20.11-23.oe2203sp1
xorg-x11-server
openEuler:22.03-LTS-SP2
From an advisory covering 2 CVEs
 before 1.20.11-23.oe2203sp2
1.20.11-23.oe2203sp2
xorg-x11-server
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xorg
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-common
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xnest
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-devel
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-source
Red Hat:enterprise_linux:7::client
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xnest
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xorg
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-common
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-source
Red Hat:enterprise_linux:7::computenode
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xorg
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-common
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xnest
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-devel
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-source
Red Hat:enterprise_linux:7::server
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xorg
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-common
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xnest
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
xorg-x11-server-source
Red Hat:enterprise_linux:7::workstation
 before 0:1.20.4-24.el7_9
0:1.20.4-24.el7_9
tigervnc
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-icons
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-license
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-server
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-server-applet
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-server-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-server-minimal
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-server-minimal-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-server-module
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc-server-module-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.9.0-16.el8_1.4
0:1.9.0-16.el8_1.4
tigervnc
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-debugsource
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-icons
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-license
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-selinux
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-server
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-server-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-server-minimal
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-server-minimal-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-server-module
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc-server-module-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 0:1.12.0-14.el9_2
0:1.12.0-14.el9_2
tigervnc
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-debugsource
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-icons
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-license
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-selinux
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-server
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-server-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-server-minimal
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-server-minimal-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-server-module
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc-server-module-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:1.11.0-22.el9_0.3
0:1.11.0-22.el9_0.3
tigervnc
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-debugsource
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-icons
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-license
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-selinux
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-server
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-server-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-server-minimal
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-server-minimal-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-server-module
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc-server-module-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:1.12.0-6.el8_6.4
0:1.12.0-6.el8_6.4
tigervnc
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-icons
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-license
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-minimal
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-applet
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-module
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-icons
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-applet
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-module
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-icons
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-license
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-minimal
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-applet
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-module
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-icons
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-license
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-minimal
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-applet
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc-server-module
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.0-26.el7_9
0:1.8.0-26.el7_9
tigervnc
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-icons
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-license
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-applet
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-minimal
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-minimal-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-module
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-module-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-debuginfo
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-debugsource
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-icons
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-license
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-applet
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-debuginfo
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-minimal
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-minimal-debuginfo
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-module
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-module-debuginfo
Red Hat:rhel_e4s:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-debuginfo
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-debugsource
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-icons
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-license
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-applet
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-debuginfo
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-minimal
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-minimal-debuginfo
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-module
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc-server-module-debuginfo
Red Hat:rhel_tus:8.2::appstream
 before 0:1.9.0-15.el8_2.4
0:1.9.0-15.el8_2.4
tigervnc
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-icons
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-license
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-selinux
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-minimal
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-minimal-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-module
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-module-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-debugsource
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-icons
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-license
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-selinux
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-minimal
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-minimal-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-module
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-server-module-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc
Red Hat:rhel_tus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
tigervnc-debugsource
Red Hat:rhel_tus:8.4::appstream
 before 0:1.11.0-8.el8_4.3
0:1.11.0-8.el8_4.3
xorg-x11-server
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 3 CVEs
 before 1.19.6-10.56.1
1.19.6-10.56.1
xorg-x11-server
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 3 CVEs
 before 1.19.6-10.56.1
1.19.6-10.56.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 3 CVEs
 before 1.19.6-10.56.1
1.19.6-10.56.1
xorg-x11-server
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 3 CVEs
 before 21.1.4-150500.7.7.1
21.1.4-150500.7.7.1
xorg-x11-server
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 3 CVEs
 before 21.1.4-150500.7.7.1
21.1.4-150500.7.7.1
xorg-x11-server
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 21.1.4-150500.7.7.1
21.1.4-150500.7.7.1
xorg-x11-server
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 3 CVEs
 before 1.20.3-150400.38.29.1
1.20.3-150400.38.29.1
xorg-x11-server
SUSE:Linux Enterprise Module for Development Tools 15 SP4
From an advisory covering 3 CVEs
 before 1.20.3-150400.38.29.1
1.20.3-150400.38.29.1
xorg-x11-server
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 1.20.3-150400.38.29.1
1.20.3-150400.38.29.1
xwayland
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 2 CVEs
 before 21.1.4-150400.3.20.1
21.1.4-150400.3.20.1
xwayland
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 21.1.4-150400.3.20.1
21.1.4-150400.3.20.1
xwayland
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 2 CVEs
 before 22.1.5-150500.7.5.1
22.1.5-150500.7.5.1
xwayland
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 22.1.5-150500.7.5.1
22.1.5-150500.7.5.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Manager Proxy 4.2
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Manager Server 4.2
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-x11-server
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 1.20.3-150200.22.5.79.1
1.20.3-150200.22.5.79.1
xorg-server
Ubuntu:Pro:14.04:LTS
 before 2:1.15.1-0ubuntu2.11+esm8, plus listed versions
2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1
Show 26 moreShow less
2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.42:1.15.1-0ubuntu2.52:1.15.1-0ubuntu2.62:1.15.1-0ubuntu2.72:1.15.1-0ubuntu2.92:1.15.1-0ubuntu2.102:1.15.1-0ubuntu2.112:1.15.1-0ubuntu2.11+esm22:1.15.1-0ubuntu2.11+esm32:1.15.1-0ubuntu2.11+esm42:1.15.1-0ubuntu2.11+esm52:1.15.1-0ubuntu2.11+esm62:1.15.1-0ubuntu2.11+esm7
2:1.15.1-0ubuntu2.11+esm8
xorg-server
Ubuntu:Pro:16.04:LTS
 before 2:1.18.4-0ubuntu0.12+esm6, plus listed versions
2:1.17.2-1ubuntu92:1.17.2-1ubuntu102:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu3
Show 22 moreShow less
2:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu22:1.18.3-1ubuntu2.22:1.18.3-1ubuntu2.32:1.18.4-0ubuntu0.12:1.18.4-0ubuntu0.22:1.18.4-0ubuntu0.32:1.18.4-0ubuntu0.42:1.18.4-0ubuntu0.62:1.18.4-0ubuntu0.72:1.18.4-0ubuntu0.82:1.18.4-0ubuntu0.92:1.18.4-0ubuntu0.102:1.18.4-0ubuntu0.112:1.18.4-0ubuntu0.122:1.18.4-0ubuntu0.12+esm12:1.18.4-0ubuntu0.12+esm22:1.18.4-0ubuntu0.12+esm42:1.18.4-0ubuntu0.12+esm5
2:1.18.4-0ubuntu0.12+esm6
xorg-server-hwe-16.04
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:1.18.4-1ubuntu6.1~16.04.12:1.18.4-1ubuntu6.1~16.04.22:1.19.3-1ubuntu1~16.04.22:1.19.3-1ubuntu1~16.04.32:1.19.3-1ubuntu1~16.04.4
Show 17 moreShow less
2:1.19.5-0ubuntu2~16.04.12:1.19.6-1ubuntu4~16.04.12:1.19.6-1ubuntu4.1~16.04.12:1.19.6-1ubuntu4.1~16.04.22:1.19.6-1ubuntu4.1~16.04.32:1.19.6-1ubuntu4.1~16.04.42:1.19.6-1ubuntu4.1~16.04.52:1.19.6-1ubuntu4.1~16.04.62:1.19.6-1ubuntu4.1~16.04.6+esm12:1.19.6-1ubuntu4.1~16.04.6+esm32:1.19.6-1ubuntu4.1~16.04.6+esm42:1.19.6-1ubuntu4.1~16.04.6+esm52:1.19.6-1ubuntu4.1~16.04.6+esm62:1.19.6-1ubuntu4.1~16.04.6+esm72:1.19.6-1ubuntu4.1~16.04.6+esm82:1.19.6-1ubuntu4.1~16.04.6+esm92:1.19.6-1ubuntu4.1~16.04.6+esm10
 None known
xorg-server
Ubuntu:Pro:18.04:LTS
 before 2:1.19.6-1ubuntu4.15+esm1, plus listed versions
2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu4
Show 15 moreShow less
2:1.19.6-1ubuntu4.12:1.19.6-1ubuntu4.22:1.19.6-1ubuntu4.32:1.19.6-1ubuntu4.42:1.19.6-1ubuntu4.52:1.19.6-1ubuntu4.62:1.19.6-1ubuntu4.72:1.19.6-1ubuntu4.82:1.19.6-1ubuntu4.92:1.19.6-1ubuntu4.102:1.19.6-1ubuntu4.112:1.19.6-1ubuntu4.122:1.19.6-1ubuntu4.132:1.19.6-1ubuntu4.142:1.19.6-1ubuntu4.15
2:1.19.6-1ubuntu4.15+esm1
xorg-server-hwe-18.04
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:1.20.1-3ubuntu2.1~18.04.12:1.20.4-1ubuntu3~18.04.12:1.20.5+git20191008-0ubuntu1~18.04.12:1.20.8-2ubuntu2.1~18.04.12:1.20.8-2ubuntu2.2~18.04.1
Show 15 moreShow less
2:1.20.8-2ubuntu2.2~18.04.22:1.20.8-2ubuntu2.2~18.04.32:1.20.8-2ubuntu2.2~18.04.42:1.20.8-2ubuntu2.2~18.04.52:1.20.8-2ubuntu2.2~18.04.62:1.20.8-2ubuntu2.2~18.04.72:1.20.8-2ubuntu2.2~18.04.82:1.20.8-2ubuntu2.2~18.04.92:1.20.8-2ubuntu2.2~18.04.102:1.20.8-2ubuntu2.2~18.04.112:1.20.8-2ubuntu2.2~18.04.11+esm12:1.20.8-2ubuntu2.2~18.04.11+esm22:1.20.8-2ubuntu2.2~18.04.11+esm32:1.20.8-2ubuntu2.2~18.04.11+esm42:1.20.8-2ubuntu2.2~18.04.11+esm5
 None known
xorg-server
Ubuntu:20.04:LTS
 before 2:1.20.13-1ubuntu1~20.04.9, plus listed versions
2:1.20.5+git20191008-0ubuntu12:1.20.6-1ubuntu12:1.20.7-2ubuntu12:1.20.7-2ubuntu22:1.20.8-2ubuntu2
Show 15 moreShow less
2:1.20.8-2ubuntu2.12:1.20.8-2ubuntu2.22:1.20.8-2ubuntu2.32:1.20.8-2ubuntu2.42:1.20.8-2ubuntu2.62:1.20.9-2ubuntu1.1~20.04.12:1.20.9-2ubuntu1.2~20.04.12:1.20.9-2ubuntu1.2~20.04.22:1.20.11-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.42:1.20.13-1ubuntu1~20.04.52:1.20.13-1ubuntu1~20.04.62:1.20.13-1ubuntu1~20.04.8
2:1.20.13-1ubuntu1~20.04.9
xorg-server
Ubuntu:22.04:LTS
 before 2:21.1.4-2ubuntu1.7~22.04.2, plus listed versions
2:1.20.13-1ubuntu12:1.20.13-1ubuntu22:1.20.14-1ubuntu12:21.1.3-2ubuntu22:21.1.3-2ubuntu2.1
Show 9 moreShow less
2:21.1.3-2ubuntu2.22:21.1.3-2ubuntu2.32:21.1.3-2ubuntu2.42:21.1.3-2ubuntu2.52:21.1.3-2ubuntu2.62:21.1.3-2ubuntu2.72:21.1.3-2ubuntu2.82:21.1.3-2ubuntu2.92:21.1.4-2ubuntu1.7~22.04.1
2:21.1.4-2ubuntu1.7~22.04.2
xwayland
Ubuntu:22.04:LTS
 before 2:22.1.1-1ubuntu0.7, plus listed versions
2:21.1.2-0ubuntu12:21.1.3-12:21.1.3-1ubuntu12:21.1.4-12:22.1.0-1
Show 7 moreShow less
2:22.1.1-12:22.1.1-1ubuntu0.12:22.1.1-1ubuntu0.22:22.1.1-1ubuntu0.32:22.1.1-1ubuntu0.42:22.1.1-1ubuntu0.52:22.1.1-1ubuntu0.6
2:22.1.1-1ubuntu0.7
xorg-server
Ubuntu:24.04:LTS
 before 2:21.1.7-3ubuntu2.1, plus listed versions
2:21.1.7-3ubuntu2
2:21.1.7-3ubuntu2.1
xwayland
Ubuntu:24.04:LTS
 before 2:23.2.0-1ubuntu0.1, plus listed versions
2:23.2.0-1
2:23.2.0-1ubuntu0.1
xorg-server
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2:1.20.13-1ubuntu1~20.04.9, plus listed versions
2:1.20.5+git20191008-0ubuntu12:1.20.6-1ubuntu12:1.20.7-2ubuntu12:1.20.7-2ubuntu22:1.20.8-2ubuntu2
Show 15 moreShow less
2:1.20.8-2ubuntu2.12:1.20.8-2ubuntu2.22:1.20.8-2ubuntu2.32:1.20.8-2ubuntu2.42:1.20.8-2ubuntu2.62:1.20.9-2ubuntu1.1~20.04.12:1.20.9-2ubuntu1.2~20.04.12:1.20.9-2ubuntu1.2~20.04.22:1.20.11-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.42:1.20.13-1ubuntu1~20.04.52:1.20.13-1ubuntu1~20.04.62:1.20.13-1ubuntu1~20.04.8
2:1.20.13-1ubuntu1~20.04.9
xorg-server
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2:21.1.4-2ubuntu1.7~22.04.2, plus listed versions
2:1.20.13-1ubuntu12:1.20.13-1ubuntu22:1.20.14-1ubuntu12:21.1.3-2ubuntu22:21.1.3-2ubuntu2.1
Show 9 moreShow less
2:21.1.3-2ubuntu2.22:21.1.3-2ubuntu2.32:21.1.3-2ubuntu2.42:21.1.3-2ubuntu2.52:21.1.3-2ubuntu2.62:21.1.3-2ubuntu2.72:21.1.3-2ubuntu2.82:21.1.3-2ubuntu2.92:21.1.4-2ubuntu1.7~22.04.1
2:21.1.4-2ubuntu1.7~22.04.2
xwayland
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2:22.1.1-1ubuntu0.7, plus listed versions
2:21.1.2-0ubuntu12:21.1.3-12:21.1.3-1ubuntu12:21.1.4-12:22.1.0-1
Show 7 moreShow less
2:22.1.1-12:22.1.1-1ubuntu0.12:22.1.1-1ubuntu0.22:22.1.1-1ubuntu0.32:22.1.1-1ubuntu0.42:22.1.1-1ubuntu0.52:22.1.1-1ubuntu0.6
2:22.1.1-1ubuntu0.7
xorg-server
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 2:1.15.1-0ubuntu2.11+esm8, plus listed versions
2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1
Show 26 moreShow less
2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.42:1.15.1-0ubuntu2.52:1.15.1-0ubuntu2.62:1.15.1-0ubuntu2.72:1.15.1-0ubuntu2.92:1.15.1-0ubuntu2.102:1.15.1-0ubuntu2.112:1.15.1-0ubuntu2.11+esm22:1.15.1-0ubuntu2.11+esm32:1.15.1-0ubuntu2.11+esm42:1.15.1-0ubuntu2.11+esm52:1.15.1-0ubuntu2.11+esm62:1.15.1-0ubuntu2.11+esm7
2:1.15.1-0ubuntu2.11+esm8
xorg-server
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 2:1.18.4-0ubuntu0.12+esm6, plus listed versions
2:1.17.2-1ubuntu92:1.17.2-1ubuntu102:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu3
Show 22 moreShow less
2:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu22:1.18.3-1ubuntu2.22:1.18.3-1ubuntu2.32:1.18.4-0ubuntu0.12:1.18.4-0ubuntu0.22:1.18.4-0ubuntu0.32:1.18.4-0ubuntu0.42:1.18.4-0ubuntu0.62:1.18.4-0ubuntu0.72:1.18.4-0ubuntu0.82:1.18.4-0ubuntu0.92:1.18.4-0ubuntu0.102:1.18.4-0ubuntu0.112:1.18.4-0ubuntu0.122:1.18.4-0ubuntu0.12+esm12:1.18.4-0ubuntu0.12+esm22:1.18.4-0ubuntu0.12+esm42:1.18.4-0ubuntu0.12+esm5
2:1.18.4-0ubuntu0.12+esm6
xorg-server
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 2:1.19.6-1ubuntu4.15+esm1, plus listed versions
2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu4
Show 15 moreShow less
2:1.19.6-1ubuntu4.12:1.19.6-1ubuntu4.22:1.19.6-1ubuntu4.32:1.19.6-1ubuntu4.42:1.19.6-1ubuntu4.52:1.19.6-1ubuntu4.62:1.19.6-1ubuntu4.72:1.19.6-1ubuntu4.82:1.19.6-1ubuntu4.92:1.19.6-1ubuntu4.102:1.19.6-1ubuntu4.112:1.19.6-1ubuntu4.122:1.19.6-1ubuntu4.132:1.19.6-1ubuntu4.142:1.19.6-1ubuntu4.15
2:1.19.6-1ubuntu4.15+esm1
xorg-x11-server
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 21.1.9-1.1
21.1.9-1.1
xwayland
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 23.2.2-1.1
23.2.2-1.1

History

History
RecordedChangedSources
affected
referencesEUVD, NVD, OSV
factsCVE List
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-5367 is a high vulnerability (CVSS 7.8) in Debian Linux, published October 25, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in xorg-server 21.1.9-r0.

References

Show 180 moreShow less
This page doesn't list everything

Left out here: 102 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open