CVE-2023-45922
published 2024-03-27CVE-2023-45922: glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there…
PriorityP418medium4.3CVSS 3.1
AVNACLPRLUINSUCNILAN
EPSS
0.54%
41.6th percentile
glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mesa | — | — |
| mesa3d | mesa | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
osv4.3MEDIUM
vendor_debian4.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9gv2-h67q-4h2v: glx_pbuffer
ghsa_unreviewed·2024-03-27
CVE-2023-45922 [MEDIUM] CWE-754 GHSA-9gv2-h67q-4h2v: glx_pbuffer
glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
OSV
CVE-2023-45922: glx_pbuffer
osv·2024-03-27·CVSS 4.3
CVE-2023-45922 [MEDIUM] CVE-2023-45922: glx_pbuffer
glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
OSV
CVE-2023-45922: ** DISPUTED ** glx_pbuffer
osv·2024-03-27·CVSS 4.3
CVE-2023-45922 [MEDIUM] CVE-2023-45922: ** DISPUTED ** glx_pbuffer
** DISPUTED ** glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
Debian
CVE-2023-45922: mesa - glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation ...
vendor_debian·2023·CVSS 4.3
CVE-2023-45922 [MEDIUM] CVE-2023-45922: mesa - glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation ...
glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://seclists.org/fulldisclosure/2024/Jan/50http://seclists.org/fulldisclosure/2024/Jan/71https://gitlab.freedesktop.org/mesa/mesa/-/issues/9857http://packetstormsecurity.com/files/176805/Mesa-23.0.4-Buffer-Overflow-Null-Pointer.htmlhttp://seclists.org/fulldisclosure/2024/Jan/50http://seclists.org/fulldisclosure/2024/Jan/71https://gitlab.freedesktop.org/mesa/mesa/-/issues/9857
2024-03-27
Published