Lucene search

[email protected]CVE-2013-7439

HistoryApr 16, 2015 - 2:59 p.m.

CVE-2013-7439

2015-04-1614:59:00

CWE-189

[email protected]

web.nvd.nist.gov

cve

2013

7439

xlibint.h

buffer overflow

remote attackers

nvd

x11

libx11

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%

JSON

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

Affected configurations

NVD

Node

x.orglibx11Match1.0.1

x.orglibx11Match1.0.2

x.orglibx11Match1.0.3

x.orglibx11Match1.1

x.orglibx11Match1.1rc1

x.orglibx11Match1.1rc2

x.orglibx11Match1.1.4

x.orglibx11Match1.1.5

x.orglibx11Match1.1.6

x.orglibx11Match1.1.99.1

x.orglibx11Match1.1.99.2

x.orglibx11Match1.2

x.orglibx11Match1.2.1

x.orglibx11Match1.2.2

x.orglibx11Match1.3

x.orglibx11Match1.3.1

x.orglibx11Match1.3.2

x.orglibx11Match1.3.3

x.orglibx11Match1.3.4

x.orglibx11Match1.3.5

x.orglibx11Match1.3.6

x.orglibx11Match1.3.99.901

x.orglibx11Match1.3.99.902

x.orglibx11Match1.3.99.903

x.orglibx11Match1.4.0

x.orglibx11Match1.4.1

x.orglibx11Match1.4.2

x.orglibx11Match1.4.3

x.orglibx11Match1.4.4

x.orglibx11Match1.4.99.901

x.orglibx11Match1.4.99.902

x.orglibx11Match1.5.0

x.orglibx11Match1.5.99.901

x.orglibx11Match1.5.99.902

Node

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch14.10

debiandebian_linuxMatch7.0

Node

x.orgx11Match6.0

x.orgx11Match6.1

x.orgx11Match6.3

x.orgx11Match6.4

x.orgx11Match6.5.1

x.orgx11Match6.6

x.orgx11Match6.7

x.orgx11Match6.8.0

x.orgx11Match6.8.1

x.orgx11Match6.8.2

x.orgx11Match6.9

CPENameOperatorVersion
x.org:libx11x.org libx11eq1.0.1
x.org:libx11x.org libx11eq1.0.2
x.org:libx11x.org libx11eq1.0.3
x.org:libx11x.org libx11eq1.1
x.org:libx11x.org libx11eq1.1.4
x.org:libx11x.org libx11eq1.1.5
x.org:libx11x.org libx11eq1.1.6
x.org:libx11x.org libx11eq1.1.99.1
x.org:libx11x.org libx11eq1.1.99.2
x.org:libx11x.org libx11eq1.2

CPE	Name	Operator	Version
x.org:libx11	x.org libx11	eq	1.0.1
x.org:libx11	x.org libx11	eq	1.0.2
x.org:libx11	x.org libx11	eq	1.0.3
x.org:libx11	x.org libx11	eq	1.1
x.org:libx11	x.org libx11	eq	1.1.4
x.org:libx11	x.org libx11	eq	1.1.5
x.org:libx11	x.org libx11	eq	1.1.6
x.org:libx11	x.org libx11	eq	1.1.99.1
x.org:libx11	x.org libx11	eq	1.1.99.2
x.org:libx11	x.org libx11	eq	1.2