CriticalFix available
xorg-server, xwayland — security advisory
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
- Products
- xorg-server, xwayland
- Affected versions
- 2:21.1.7-3, 2:21.1.7-3+deb12u1, 2:21.1.7-3+deb12u2, 2:21.1.7-3+deb12u3, 2:21.1.7-3+deb12u4, 2:22.1.9-1, 2:23.1.0-1, 2:23.1.1-1, 2:23.2.0-1, 2:23.2.1-1, 2:23.2.2-1, 2:23.2.3-1, 2:23.2.4-1, 2:23.2.6-1, 2:24.0.99.901-1, 2:24.1.0-1, 2:24.1.10-1, 2:24.1.11-1, 2:24.1.12-1, 2:24.1.13-1, 2:24.1.14-1, 2:24.1.2-1, 2:24.1.3-1, 2:24.1.4-1, 2:24.1.4-2, 2:24.1.4-3, 2:24.1.5-1, 2:24.1.6-1, 2:24.1.8-1, 2:24.1.9-1
- Fixed versions
- 2:21.1.11-1, 2:21.1.7-3+deb12u5, 2:23.2.4-1
- CVEs
- CVE-2023-6816
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 16:16 UTC · Revision 1
Source evidence
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
osv:DEBIAN-CVE-2023-6816
xorg-server
Fixed versions: 2:21.1.7-3+deb12u5
xorg-server
Fixed versions: 2:21.1.11-1
xorg-server
Fixed versions: 2:21.1.11-1
xwayland
Fixed versions: Not specified
xwayland
Fixed versions: 2:23.2.4-1
xwayland
Fixed versions: 2:23.2.4-1
Complete source record
{
"id": "fa55c0bfe13e388b9ab4562ac52d00f2734f27afeb1c1213e92cf94452003550",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2023-6816",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2023-6816",
"summary": "A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.",
"evidence": "osv:DEBIAN-CVE-2023-6816",
"products": [
{
"name": {
"value": "xorg-server",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:21.1.7-3+deb12u5",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "2:21.1.7-3",
"evidence": "/affected/0/versions"
},
{
"value": "2:21.1.7-3+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:21.1.7-3+deb12u2",
"evidence": "/affected/0/versions"
},
{
"value": "2:21.1.7-3+deb12u3",
"evidence": "/affected/0/versions"
},
{
"value": "2:21.1.7-3+deb12u4",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "xorg-server",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:21.1.11-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xorg-server",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:21.1.11-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xwayland",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2:22.1.9-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:23.1.0-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:23.1.1-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:23.2.0-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:23.2.1-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:23.2.2-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:23.2.3-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:23.2.4-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:23.2.6-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.0.99.901-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.0-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.10-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.11-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.12-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.13-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.14-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.2-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.3-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.4-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.4-2",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.4-3",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.5-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.6-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.8-1",
"evidence": "/affected/3/versions"
},
{
"value": "2:24.1.9-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "xwayland",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:23.2.4-1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xwayland",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:23.2.4-1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "DEBIAN-CVE-2023-6816",
"aliases": [
"DEBIAN-CVE-2023-6816"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:21.1.7-3+deb12u5"
}
]
}
],
"package": {
"name": "xorg-server",
"purl": "pkg:deb/debian/xorg-server?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"2:21.1.7-3",
"2:21.1.7-3+deb12u1",
"2:21.1.7-3+deb12u2",
"2:21.1.7-3+deb12u3",
"2:21.1.7-3+deb12u4"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-6816.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:21.1.11-1"
}
]
}
],
"package": {
"name": "xorg-server",
"purl": "pkg:deb/debian/xorg-server?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-6816.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:21.1.11-1"
}
]
}
],
"package": {
"name": "xorg-server",
"purl": "pkg:deb/debian/xorg-server?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-6816.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "xwayland",
"purl": "pkg:deb/debian/xwayland?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"2:22.1.9-1",
"2:23.1.0-1",
"2:23.1.1-1",
"2:23.2.0-1",
"2:23.2.1-1",
"2:23.2.2-1",
"2:23.2.3-1",
"2:23.2.4-1",
"2:23.2.6-1",
"2:24.0.99.901-1",
"2:24.1.0-1",
"2:24.1.10-1",
"2:24.1.11-1",
"2:24.1.12-1",
"2:24.1.13-1",
"2:24.1.14-1",
"2:24.1.2-1",
"2:24.1.3-1",
"2:24.1.4-1",
"2:24.1.4-2",
"2:24.1.4-3",
"2:24.1.5-1",
"2:24.1.6-1",
"2:24.1.8-1",
"2:24.1.9-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-6816.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:23.2.4-1"
}
]
}
],
"package": {
"name": "xwayland",
"purl": "pkg:deb/debian/xwayland?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-6816.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:23.2.4-1"
}
]
}
],
"package": {
"name": "xwayland",
"purl": "pkg:deb/debian/xwayland?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-6816.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-26T18:02:55.420178680Z",
"provider": "osv",
"upstream": [
"CVE-2023-6816"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2023-6816"
]
},
"related_cves": [
{
"value": "CVE-2023-6816",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 457220,
"published_at": "2024-01-18T05:15:08.607+00:00"
}