このページは Alpine Linux 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2023-6816 の詳細 →
未評価
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can...
ALPINE-CVE-2023-6816
SecPulse初出
影響パッケージ
| パッケージ | 影響を受ける版 → 修正版 | |
|---|---|---|
| Alpine:v3.19xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.20xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.21xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.22xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.23xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.24xorg-server |
21.1.11-r0 未満→ 21.1.11-r0 |
21.1.11-r0 |
| Alpine:v3.19xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.20xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.21xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.22xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.23xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
| Alpine:v3.24xwayland |
23.2.4-r0 未満→ 23.2.4-r0 |
23.2.4-r0 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
出典: OSV.dev (Open Source Vulnerabilities) OSV
参照URL
- advisory security.alpinelinux.org