⌘ + K

USN-6555-1

Dashboard / Vulnerabilities / USN-6555-1

USN-6555-1

Published: 13 Dec 2023Last Modified: 27 Apr 2026

Upstream:

Aliases:

Summary: xorg-server, xwayland vulnerabilities

Details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled XKB button actions. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-6377) Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when processing the RRChangeOutputProperty and RRChangeProviderProperty APIs. An attacker could possibly use this issue to cause the X Server to crash, or obtain sensitive information. (CVE-2023-6478)

References: https://ubuntu.com/security/notices/USN-6555-1, https://ubuntu.com/security/CVE-2023-6377, https://ubuntu.com/security/CVE-2023-6478

Affected packages

Package

Name: xorg-server

Purl: pkg:deb/ubuntu/xorg-server@2:1.20.13-1ubuntu1~20.04.12?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -2:1.20.13-1ubuntu1~20.04.12

Affected versions

2:1.20.5+git20191008-0ubuntu1

2:1.20.6-1ubuntu1

2:1.20.7-2ubuntu1

2:1.20.7-2ubuntu2

2:1.20.8-2ubuntu2

2:1.20.8-2ubuntu2.1

2:1.20.8-2ubuntu2.2

2:1.20.8-2ubuntu2.3

2:1.20.8-2ubuntu2.4

2:1.20.8-2ubuntu2.6

2:1.20.9-2ubuntu1.1~20.04.1

2:1.20.9-2ubuntu1.2~20.04.1

2:1.20.9-2ubuntu1.2~20.04.2

2:1.20.11-1ubuntu1~20.04.2

2:1.20.13-1ubuntu1~20.04.2

2:1.20.13-1ubuntu1~20.04.3

2:1.20.13-1ubuntu1~20.04.4

2:1.20.13-1ubuntu1~20.04.5

2:1.20.13-1ubuntu1~20.04.6

2:1.20.13-1ubuntu1~20.04.8

2:1.20.13-1ubuntu1~20.04.9

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High