CVE-2013-1993

2013-06-1519:55:01

CWE-189

redhat

web.nvd.nist.gov

cve-2013-1993

x.org

libglx

mesa

integer overflow

buffer overflow

memory allocation

x server

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.011

Percentile

84.2%

JSON

Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.

Affected configurations

Nvd

Node

mesa3dmesaRange≤9.1.1

mesa3dmesaMatch9.0

mesa3dmesaMatch9.0.1

mesa3dmesaMatch9.0.2

mesa3dmesaMatch9.0.3

mesa3dmesaMatch9.1

xlibglxMatch-

VendorProductVersionCPE
mesa3dmesa*cpe:2.3:a:mesa3d:mesa:*:*:*:*:*:*:*:*
mesa3dmesa9.0cpe:2.3:a:mesa3d:mesa:9.0:*:*:*:*:*:*:*
mesa3dmesa9.0.1cpe:2.3:a:mesa3d:mesa:9.0.1:*:*:*:*:*:*:*
mesa3dmesa9.0.2cpe:2.3:a:mesa3d:mesa:9.0.2:*:*:*:*:*:*:*
mesa3dmesa9.0.3cpe:2.3:a:mesa3d:mesa:9.0.3:*:*:*:*:*:*:*
mesa3dmesa9.1cpe:2.3:a:mesa3d:mesa:9.1:*:*:*:*:*:*:*
xlibglx-cpe:2.3:a:x:libglx:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mesa3d	mesa	*	cpe:2.3:a:mesa3d:mesa::::::::
mesa3d	mesa	9.0	cpe:2.3:a:mesa3d:mesa:9.0:::::::*
mesa3d	mesa	9.0.1	cpe:2.3:a:mesa3d:mesa:9.0.1:::::::*
mesa3d	mesa	9.0.2	cpe:2.3:a:mesa3d:mesa:9.0.2:::::::*
mesa3d	mesa	9.0.3	cpe:2.3:a:mesa3d:mesa:9.0.3:::::::*
mesa3d	mesa	9.1	cpe:2.3:a:mesa3d:mesa:9.1:::::::*
x	libglx	-	cpe:2.3:a:x:libglx:-:::::::*