PT-2024-13301
CVE-2023-45919
·
Published
2024-03-26
·
Updated
2025-08-29
Description by
CVSS 3.1
5.3
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Mesa version 23.0.4
Description
A buffer over-read was discovered in the
glXQueryServerString() function. This issue is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controlled server.Recommendations
For Mesa version 23.0.4, consider disabling the
glXQueryServerString() function until a patch is available.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾