CVE-2013-1986

2013-06-1519:55:01

CWE-189

[email protected]

web.nvd.nist.gov

cve

2013

1986

x.org

libxrandr

integer overflows

buffer overflow

memory allocation

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.1%

JSON

Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.

Affected configurations

NVD

Node

xlibxrandrRange≤1.4.0

xlibxrandrMatch1.2.3

xlibxrandrMatch1.2.99.1

xlibxrandrMatch1.2.99.2

xlibxrandrMatch1.2.99.3

xlibxrandrMatch1.2.99.4

xlibxrandrMatch1.3.0

xlibxrandrMatch1.3.1

xlibxrandrMatch1.3.2

CPENameOperatorVersion
x:libxrandrx libxrandrle1.4.0
x:libxrandrx libxrandreq1.2.3
x:libxrandrx libxrandreq1.2.99.1
x:libxrandrx libxrandreq1.2.99.2
x:libxrandrx libxrandreq1.2.99.3
x:libxrandrx libxrandreq1.2.99.4
x:libxrandrx libxrandreq1.3.0
x:libxrandrx libxrandreq1.3.1
x:libxrandrx libxrandreq1.3.2

CPE	Name	Operator	Version
x:libxrandr	x libxrandr	le	1.4.0
x:libxrandr	x libxrandr	eq	1.2.3
x:libxrandr	x libxrandr	eq	1.2.99.1
x:libxrandr	x libxrandr	eq	1.2.99.2
x:libxrandr	x libxrandr	eq	1.2.99.3
x:libxrandr	x libxrandr	eq	1.2.99.4
x:libxrandr	x libxrandr	eq	1.3.0
x:libxrandr	x libxrandr	eq	1.3.1
x:libxrandr	x libxrandr	eq	1.3.2