⌘ + K

USN-6453-1

Dashboard / Vulnerabilities / USN-6453-1

USN-6453-1

Published: 25 Oct 2023Last Modified: 27 Apr 2026

Upstream:

Aliases:

Summary: xorg-server, xwayland vulnerabilities

Details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled prepending values to certain properties. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-5367) Sri discovered that the X.Org X Server incorrectly handled detroying windows in certain legacy multi-screen setups. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-5380)

References: https://ubuntu.com/security/notices/USN-6453-1, https://ubuntu.com/security/CVE-2023-5367, https://ubuntu.com/security/CVE-2023-5380

Affected packages

Package

Name: xorg-server

Purl: pkg:deb/ubuntu/xorg-server@2:1.20.13-1ubuntu1~20.04.9?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -2:1.20.13-1ubuntu1~20.04.9

Affected versions

2:1.20.5+git20191008-0ubuntu1

2:1.20.6-1ubuntu1

2:1.20.7-2ubuntu1

2:1.20.7-2ubuntu2

2:1.20.8-2ubuntu2

2:1.20.8-2ubuntu2.1

2:1.20.8-2ubuntu2.2

2:1.20.8-2ubuntu2.3

2:1.20.8-2ubuntu2.4

2:1.20.8-2ubuntu2.6

2:1.20.9-2ubuntu1.1~20.04.1

2:1.20.9-2ubuntu1.2~20.04.1

2:1.20.9-2ubuntu1.2~20.04.2

2:1.20.11-1ubuntu1~20.04.2

2:1.20.13-1ubuntu1~20.04.2

2:1.20.13-1ubuntu1~20.04.3

2:1.20.13-1ubuntu1~20.04.4

2:1.20.13-1ubuntu1~20.04.5

2:1.20.13-1ubuntu1~20.04.6

2:1.20.13-1ubuntu1~20.04.8

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High