{"id":"CVE-2023-45931","aliases":["BELL-CVE-2023-45931","DEBIAN-CVE-2023-45931","EUVD-2023-50194","GHSA-4gxp-6chj-c99r"],"status":"disputed","title":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the...","description":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.01034,"percentile":0.64127,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2024-03-27T00:00:00Z","modified":"2026-10-28T02:31:04Z","affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"22.2.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.3.6-1+deb12u1","22.3.6-1+deb12u2","23.0.0-1","23.0.0~rc1-1","23.0.0~rc4-1","23.0.1-1","23.0.2-1","23.1.0-1","23.1.0~rc2-1","23.1.0~rc3-1","23.1.1-1","23.1.2-1","23.1.3-1","23.1.4-1","23.1.6-1","23.1.7-1","23.2.0~rc2-1","23.2.0~rc3-1","23.2.0~rc3-2","23.2.0~rc3-3","23.2.0~rc4-1","23.2.1-1","23.3.0-1","23.3.0-2","23.3.0~rc1-1","23.3.0~rc2-1","23.3.0~rc3-1","23.3.0~rc4-1","23.3.0~rc5-1","23.3.1-1","23.3.1-1+exp1","23.3.1-2","23.3.1-3","23.3.1-4","23.3.2-1","23.3.2-2","23.3.3-1","23.3.3-2","23.3.3-3","23.3.4-1","23.3.5-1","24.0.0-1","24.0.0-2","24.0.0~rc1-1","24.0.0~rc2-1","24.0.0~rc3-1","24.0.1-1","24.0.2-1","24.0.3-1","24.0.4-1","24.0.5-1","24.0.6-1","24.0.7-1","24.0.8-1","24.1.0-1","24.1.0-2","24.1.0~rc1-1","24.1.0~rc2-1","24.1.0~rc3-1","24.1.1-1","24.1.1-2","24.1.2-1","24.1.3-1","24.1.3-2","24.1.5-1","24.1.5-2","24.1.5-3","24.1.6-1","24.2.0-1","24.2.0-2","24.2.0~rc3-1","24.2.0~rc3-2","24.2.0~rc4-1","24.2.1-1","24.2.1-2","24.2.1-3","24.2.1-4","24.2.2-1","24.2.2-1+exp1","24.2.2-1~bpo12+1","24.2.3-1","24.2.3-1+x32","24.2.4-1","24.2.4-1~bpo12+1","24.2.6-1","24.2.7-1","24.2.8-1","24.2.8-1~bpo12+1","24.3.0-1","24.3.0~rc1-1","24.3.0~rc2-1","24.3.3-1","24.3.4-1","24.3.4-2","24.3.4-3","25.0.0-1","25.0.0~rc1-1","25.0.0~rc1-2","25.0.0~rc2-1","25.0.0~rc3-1","25.0.1-1","25.0.1-2","25.0.2-1","25.0.3-1","25.0.4-1","25.0.4-1~bpo12+1","25.0.5-1","25.0.5-2","25.0.7-1","25.0.7-2","25.0.7-2~bpo12+1","25.1.0-1","25.1.5-1","25.1.7-1","25.2.0-1","25.2.1-1","25.2.1-2","25.2.2-1","25.2.3-1","25.2.3-1~bpo13+1","25.2.4-1","25.2.4-1~bpo13+1","25.2.4-1~bpo13+2","25.2.5-1","25.2.6-1","25.2.6-1~bpo13+1","25.2.7-1","25.2.8-1","25.2.8-2","25.3.0-1","25.3.0~rc1-1","25.3.0~rc2-1","25.3.0~rc4-1","25.3.1-1","25.3.2-1","25.3.2-2","25.3.3-1","26.0.0-1","26.0.0~rc3-1","26.0.1-1","26.0.1-2","26.0.2-1","26.0.3-1","26.0.4-1","26.0.5-1","26.0.6-1","26.0.7-1","26.0.8-1","26.1.0-1","26.1.0~rc1-1","26.1.0~rc2-1","26.1.0~rc3-1","26.1.2-1","26.1.2-1~bpo13+1","26.1.4-1","26.1.5-1","26.1.6-1","26.1.6-1~bpo13+1","26.2.0-1","26.2.0~rc1-1","26.2.0~rc3-1","26.2.1-1","26.2.1-2","26.2.1-3","26.2.1-4","26.2.2-1","26.2.2-2","26.2.3-1","26.2.3-2","26.2.4-1","26.2.5-1"]},{"source":"osv","ecosystem":"Debian:13","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.0.7-2","25.0.7-2+deb13u1","25.1.0-1","25.1.5-1","25.1.7-1","25.2.0-1","25.2.1-1","25.2.1-2","25.2.2-1","25.2.3-1","25.2.3-1~bpo13+1","25.2.4-1","25.2.4-1~bpo13+1","25.2.4-1~bpo13+2","25.2.5-1","25.2.6-1","25.2.6-1~bpo13+1","25.2.7-1","25.2.8-1","25.2.8-2","25.3.0-1","25.3.0~rc1-1","25.3.0~rc2-1","25.3.0~rc4-1","25.3.1-1","25.3.2-1","25.3.2-2","25.3.3-1","26.0.0-1","26.0.0~rc3-1","26.0.1-1","26.0.1-2","26.0.2-1","26.0.3-1","26.0.4-1","26.0.5-1","26.0.6-1","26.0.7-1","26.0.8-1","26.1.0-1","26.1.0~rc1-1","26.1.0~rc2-1","26.1.0~rc3-1","26.1.2-1","26.1.2-1~bpo13+1","26.1.4-1","26.1.5-1","26.1.6-1","26.1.6-1~bpo13+1","26.2.0-1","26.2.0~rc1-1","26.2.0~rc3-1","26.2.1-1","26.2.1-2","26.2.1-3","26.2.1-4","26.2.2-1","26.2.2-2","26.2.3-1","26.2.3-2","26.2.4-1","26.2.5-1"]},{"source":"osv","ecosystem":"Debian:14","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.0.7-2","25.1.0-1","25.1.5-1","25.1.7-1","25.2.0-1","25.2.1-1","25.2.1-2","25.2.2-1","25.2.3-1","25.2.3-1~bpo13+1","25.2.4-1","25.2.4-1~bpo13+1","25.2.4-1~bpo13+2","25.2.5-1","25.2.6-1","25.2.6-1~bpo13+1","25.2.7-1","25.2.8-1","25.2.8-2","25.3.0-1","25.3.0~rc1-1","25.3.0~rc2-1","25.3.0~rc4-1","25.3.1-1","25.3.2-1","25.3.2-2","25.3.3-1","26.0.0-1","26.0.0~rc3-1","26.0.1-1","26.0.1-2","26.0.2-1","26.0.3-1","26.0.4-1","26.0.5-1","26.0.6-1","26.0.7-1","26.0.8-1","26.1.0-1","26.1.0~rc1-1","26.1.0~rc2-1","26.1.0~rc3-1","26.1.2-1","26.1.2-1~bpo13+1","26.1.4-1","26.1.5-1","26.1.6-1","26.1.6-1~bpo13+1","26.2.0-1","26.2.0~rc1-1","26.2.0~rc3-1","26.2.1-1","26.2.1-2","26.2.1-3","26.2.1-4","26.2.2-1","26.2.2-2","26.2.3-1","26.2.3-2","26.2.4-1","26.2.5-1"]}],"products":[{"vendor":"mesa3d","product":"mesa"}],"references":[{"url":"https://gitlab.freedesktop.org/mesa/mesa/-/issues/9859","tags":["x_transferred","Exploit","Vendor Advisory","report"]},{"url":"https://seclists.org/fulldisclosure/2024/Jan/71","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"http://packetstormsecurity.com/files/176813/Mesa-23.0.4-Null-Pointer.html","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/71","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/59","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45931","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4gxp-6chj-c99r"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-45931","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45931.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45931","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-45931","description":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.","status":"disputed","published":"2024-03-27T00:00:00Z","modified":"2025-11-04T18:18:25.297Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:35:22.640346Z"}],"euvd":[{"id":"EUVD-2023-50194","description":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.","status":"published","published":"2024-03-27T00:00:00Z","modified":"2025-11-04T18:18:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:24.543935Z"}],"ghsa":[{"id":"GHSA-4gxp-6chj-c99r","title":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the...","description":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.","status":"published","published":"2024-03-27T06:30:31Z","modified":"2025-11-04T21:31:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:04:36.536202Z"}],"nvd":[{"id":"CVE-2023-45931","description":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.","status":"disputed","published":"2024-03-27T04:15:11.25Z","modified":"2026-06-17T06:29:48.707Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:09:10.192572Z"}],"osv":[{"id":"BELL-CVE-2023-45931","status":"published","published":"2024-03-28T05:59:19.179454Z","modified":"2026-01-26T09:35:33.576488Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-45931","description":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.","status":"published","published":"2024-03-27T00:00:00Z","modified":"2026-10-28T02:31:04.825881457Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-45931","description":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.","status":"published","published":"2024-03-27T04:15:11.25Z","modified":"2026-10-26T18:02:41.927259024Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"}]}}