CVE-2023-6816
Published: 18 January 2024
Summary
CVE-2023-6816 is a critical-severity Out-of-bounds Write (CWE-787) vulnerability in X.Org X Server. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation of Remote Services (T1210); ranked in the top 13.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-59026
Vulnerability details
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating…
more
space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
CVE-2023-6816 is a remotely exploitable heap buffer overflow in X.Org Server via crafted XIQueryPointer requests or DeviceFocusEvent handling, enabling adversaries to exploit the remote X11 service for potential code execution.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.