{"id":"CVE-2023-45922","aliases":["DEBIAN-CVE-2023-45922","EUVD-2023-50185","GHSA-9gv2-h67q-4h2v","SUSE-SU-2024:3526-1","SUSE-SU-2024:3540-1","SUSE-SU-2024:3544-1","SUSE-SU-2024:3548-1","SUSE-SU-2025:02803-1","SUSE-SU-2025:20082-1","SUSE-SU-2025:20664-1","openSUSE-SU-2024:14475-1"],"status":"disputed","title":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling...","description":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00536,"percentile":0.45482,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-754"],"published":"2024-03-27T00:00:00Z","modified":"2026-10-28T02:31:09Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.3.6-1+deb12u1","22.3.6-1+deb12u2","23.0.0-1","23.0.0~rc1-1","23.0.0~rc4-1","23.0.1-1","23.0.2-1","23.1.0-1","23.1.0~rc2-1","23.1.0~rc3-1","23.1.1-1","23.1.2-1","23.1.3-1","23.1.4-1","23.1.6-1","23.1.7-1","23.2.0~rc2-1","23.2.0~rc3-1","23.2.0~rc3-2","23.2.0~rc3-3","23.2.0~rc4-1","23.2.1-1","23.3.0-1","23.3.0-2","23.3.0~rc1-1","23.3.0~rc2-1","23.3.0~rc3-1","23.3.0~rc4-1","23.3.0~rc5-1","23.3.1-1","23.3.1-1+exp1","23.3.1-2","23.3.1-3","23.3.1-4","23.3.2-1","23.3.2-2","23.3.3-1","23.3.3-2","23.3.3-3","23.3.4-1","23.3.5-1","24.0.0-1","24.0.0-2","24.0.0~rc1-1","24.0.0~rc2-1","24.0.0~rc3-1","24.0.1-1","24.0.2-1","24.0.3-1","24.0.4-1","24.0.5-1","24.0.6-1","24.0.7-1","24.0.8-1","24.1.0-1","24.1.0-2","24.1.0~rc1-1","24.1.0~rc2-1","24.1.0~rc3-1","24.1.1-1","24.1.1-2","24.1.2-1","24.1.3-1","24.1.3-2","24.1.5-1","24.1.5-2","24.1.5-3","24.1.6-1","24.2.0-1","24.2.0-2","24.2.0~rc3-1","24.2.0~rc3-2","24.2.0~rc4-1","24.2.1-1","24.2.1-2","24.2.1-3","24.2.1-4","24.2.2-1","24.2.2-1+exp1","24.2.2-1~bpo12+1","24.2.3-1","24.2.3-1+x32","24.2.4-1","24.2.4-1~bpo12+1","24.2.6-1","24.2.7-1","24.2.8-1","24.2.8-1~bpo12+1","24.3.0-1","24.3.0~rc1-1","24.3.0~rc2-1","24.3.3-1","24.3.4-1","24.3.4-2","24.3.4-3","25.0.0-1","25.0.0~rc1-1","25.0.0~rc1-2","25.0.0~rc2-1","25.0.0~rc3-1","25.0.1-1","25.0.1-2","25.0.2-1","25.0.3-1","25.0.4-1","25.0.4-1~bpo12+1","25.0.5-1","25.0.5-2","25.0.7-1","25.0.7-2","25.0.7-2~bpo12+1","25.1.0-1","25.1.5-1","25.1.7-1","25.2.0-1","25.2.1-1","25.2.1-2","25.2.2-1","25.2.3-1","25.2.3-1~bpo13+1","25.2.4-1","25.2.4-1~bpo13+1","25.2.4-1~bpo13+2","25.2.5-1","25.2.6-1","25.2.6-1~bpo13+1","25.2.7-1","25.2.8-1","25.2.8-2","25.3.0-1","25.3.0~rc1-1","25.3.0~rc2-1","25.3.0~rc4-1","25.3.1-1","25.3.2-1","25.3.2-2","25.3.3-1","26.0.0-1","26.0.0~rc3-1","26.0.1-1","26.0.1-2","26.0.2-1","26.0.3-1","26.0.4-1","26.0.5-1","26.0.6-1","26.0.7-1","26.0.8-1","26.1.0-1","26.1.0~rc1-1","26.1.0~rc2-1","26.1.0~rc3-1","26.1.2-1","26.1.2-1~bpo13+1","26.1.4-1","26.1.5-1","26.1.6-1","26.1.6-1~bpo13+1","26.2.0-1","26.2.0~rc1-1","26.2.0~rc3-1","26.2.1-1","26.2.1-2","26.2.1-3","26.2.1-4","26.2.2-1","26.2.2-2","26.2.3-1","26.2.3-2","26.2.4-1","26.2.5-1"]},{"source":"osv","ecosystem":"Debian:13","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.0.7-2","25.0.7-2+deb13u1","25.1.0-1","25.1.5-1","25.1.7-1","25.2.0-1","25.2.1-1","25.2.1-2","25.2.2-1","25.2.3-1","25.2.3-1~bpo13+1","25.2.4-1","25.2.4-1~bpo13+1","25.2.4-1~bpo13+2","25.2.5-1","25.2.6-1","25.2.6-1~bpo13+1","25.2.7-1","25.2.8-1","25.2.8-2","25.3.0-1","25.3.0~rc1-1","25.3.0~rc2-1","25.3.0~rc4-1","25.3.1-1","25.3.2-1","25.3.2-2","25.3.3-1","26.0.0-1","26.0.0~rc3-1","26.0.1-1","26.0.1-2","26.0.2-1","26.0.3-1","26.0.4-1","26.0.5-1","26.0.6-1","26.0.7-1","26.0.8-1","26.1.0-1","26.1.0~rc1-1","26.1.0~rc2-1","26.1.0~rc3-1","26.1.2-1","26.1.2-1~bpo13+1","26.1.4-1","26.1.5-1","26.1.6-1","26.1.6-1~bpo13+1","26.2.0-1","26.2.0~rc1-1","26.2.0~rc3-1","26.2.1-1","26.2.1-2","26.2.1-3","26.2.1-4","26.2.2-1","26.2.2-2","26.2.3-1","26.2.3-2","26.2.4-1","26.2.5-1"]},{"source":"osv","ecosystem":"Debian:14","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.0.7-2","25.1.0-1","25.1.5-1","25.1.7-1","25.2.0-1","25.2.1-1","25.2.1-2","25.2.2-1","25.2.3-1","25.2.3-1~bpo13+1","25.2.4-1","25.2.4-1~bpo13+1","25.2.4-1~bpo13+2","25.2.5-1","25.2.6-1","25.2.6-1~bpo13+1","25.2.7-1","25.2.8-1","25.2.8-2","25.3.0-1","25.3.0~rc1-1","25.3.0~rc2-1","25.3.0~rc4-1","25.3.1-1","25.3.2-1","25.3.2-2","25.3.3-1","26.0.0-1","26.0.0~rc3-1","26.0.1-1","26.0.1-2","26.0.2-1","26.0.3-1","26.0.4-1","26.0.5-1","26.0.6-1","26.0.7-1","26.0.8-1","26.1.0-1","26.1.0~rc1-1","26.1.0~rc2-1","26.1.0~rc3-1","26.1.2-1","26.1.2-1~bpo13+1","26.1.4-1","26.1.5-1","26.1.6-1","26.1.6-1~bpo13+1","26.2.0-1","26.2.0~rc1-1","26.2.0~rc3-1","26.2.1-1","26.2.1-2","26.2.1-3","26.2.1-4","26.2.2-1","26.2.2-2","26.2.3-1","26.2.3-2","26.2.4-1","26.2.5-1"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.2-14.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.2-14.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.2-14.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.2-14.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.2-14.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.2-14.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.2-14.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.2-14.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-150600.83.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-150600.83.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-150600.83.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-150600.83.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-150600.83.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-150600.83.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.2.4-150400.68.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.2.4-150400.68.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.2.4-150400.68.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.2.4-150400.68.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.2.4-150400.68.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.2.4-150400.68.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.3.5-150500.77.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.2.4-150300.59.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"Mesa-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"Mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.2.6-392.1"}]}],"bundled":3}],"products":[{"vendor":"mesa3d","product":"mesa"}],"references":[{"url":"https://gitlab.freedesktop.org/mesa/mesa/-/issues/9857","tags":["x_transferred","Issue Tracking","report"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/50","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/71","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://packetstormsecurity.com/files/176805/Mesa-23.0.4-Buffer-Overflow-Null-Pointer.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45922","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9gv2-h67q-4h2v"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45922.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45922","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243526-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1222040","tags":["report"]},{"url":"https://bugzilla.suse.com/1222041","tags":["report"]},{"url":"https://bugzilla.suse.com/1222042","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45922","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243540-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243544-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243548-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502803-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520082-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520664-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-45922","description":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.","status":"disputed","published":"2024-03-27T00:00:00Z","modified":"2025-11-04T18:18:05.167Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:35:22.984825Z"}],"euvd":[{"id":"EUVD-2023-50185","description":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.","status":"published","published":"2024-03-27T00:00:00Z","modified":"2025-11-04T18:18:05Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:24.543935Z"}],"ghsa":[{"id":"GHSA-9gv2-h67q-4h2v","title":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling...","description":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.","status":"published","published":"2024-03-27T06:30:32Z","modified":"2025-11-04T21:31:23Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T15:04:36.536202Z"}],"nvd":[{"id":"CVE-2023-45922","description":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.","status":"disputed","published":"2024-03-27T05:15:47.203Z","modified":"2026-06-17T06:29:47.72Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:09:10.192572Z"}],"osv":[{"id":"CVE-2023-45922","description":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.","status":"published","published":"2024-03-27T00:00:00Z","modified":"2026-10-28T02:31:09.130260898Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-45922","description":"glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.","status":"published","published":"2024-03-27T05:15:47.203Z","modified":"2026-10-26T18:01:44.991543224Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"openSUSE-SU-2024:14475-1","title":"Mesa-24.2.6-392.1 on GA media","description":"These are all security issues fixed in the Mesa-24.2.6-392.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-11-08T00:00:00Z","modified":"2026-02-04T04:23:13.722394Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2024:3526-1","title":"Security update for Mesa","description":"This update for Mesa fixes the following issues:\n\n- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).\n- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).\n- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).\n","status":"published","published":"2024-10-04T13:25:20Z","modified":"2026-02-04T02:58:46.890635Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3540-1","title":"Security update for Mesa","description":"This update for Mesa fixes the following issues:\n\n- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)\n- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)\n- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)\n","status":"published","published":"2024-10-08T08:30:23Z","modified":"2026-02-04T02:54:36.313939Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3544-1","title":"Security update for Mesa","description":"This update for Mesa fixes the following issues:\n\n- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).\n- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).\n- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).\n","status":"published","published":"2024-10-08T14:04:05Z","modified":"2026-02-04T03:13:14.27908Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3548-1","title":"Security update for Mesa","description":"This update for Mesa fixes the following issues:\n\n- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)\n- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)\n- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)\n","status":"published","published":"2024-10-08T14:06:54Z","modified":"2026-02-04T02:23:19.941404Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:02803-1","title":"Security update for Mesa","description":"This update for Mesa fixes the following issues:\n\n- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)\n- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)\n- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)\n","status":"published","published":"2025-08-14T16:33:50Z","modified":"2026-02-04T03:06:19.669643Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:20082-1","title":"Security update for Mesa","description":"This update for Mesa fixes the following issues:\n\n- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).\n- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).\n- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042).\n","status":"published","published":"2025-02-03T09:06:42Z","modified":"2026-03-23T04:50:03.529576Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20664-1","title":"Security update for Mesa","description":"This update for Mesa fixes the following issues:\n\n- CVE-2023-45913: NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).\n- CVE-2023-45919: Buffer over-read in glXQueryServerString() (bsc#1222041).\n- CVE-2023-45922: Segmentation violation in __glXGetDrawableAttribute() (bsc#1222042).\n","status":"published","published":"2025-08-29T08:57:25Z","modified":"2026-03-23T04:48:21.863398Z","updated_at":"2026-11-02T15:53:59.92114Z"}]}}