Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2023-6478 Details
Description
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Dec 19, 2023Exploitation: NoneAutomatable: YesTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| x.org x server | < 21.1.10 |
CPE
Remediation
| |
| redhat enterprise linux | 6.0 7.0 8.0 9.0 |
CPE
Remediation
| |
| x.org xwayland | < 23.2.3 |
CPE
Remediation
| |
| redhat enterprise linux eus | 9.2 |
CPE
Remediation
| |
| debian debian linux | 10.0 11.0 12.0 |
CPE
Remediation
| |
| tigervnc tigervnc | All versions |
CPE
Remediation
| |
Change History
24 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 23, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Aug 4, 2025 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Sep 16, 2024 | CVE Modified | [email protected] |
| May 29, 2024 | CVE Modified | [email protected] |
| May 22, 2024 | CVE Modified | [email protected] |
| May 22, 2024 | CVE Modified | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Apr 30, 2024 | CVE Modified | [email protected] |
| Jan 31, 2024 | CVE Modified | [email protected] |
| Jan 25, 2024 | CVE Modified | [email protected] |
| Jan 11, 2024 | CVE Modified | [email protected] |
| Jan 2, 2024 | CVE Modified | [email protected] |
| Dec 29, 2023 | CVE Modified | [email protected] |
| Dec 25, 2023 | CVE Modified | [email protected] |
| Dec 21, 2023 | Initial Analysis | [email protected] |
| Dec 20, 2023 | CVE Modified | [email protected] |
| Dec 19, 2023 | CVE Modified | [email protected] |
| Dec 15, 2023 | CVE Modified | [email protected] |
| Dec 13, 2023 | CVE Modified | [email protected] |
| Dec 13, 2023 | CVE Modified | [email protected] |
| Dec 13, 2023 | CVE Modified | [email protected] |
| Dec 13, 2023 | New CVE Received | [email protected] |