Lucene search
Ubuntu.comUB:CVE-2013-6424HistoryJan 18, 2014 - 12:00 a.m.
CVE-2013-6424
2014-01-1800:00:00
ubuntu.com
ubuntu.com
15
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.009
Percentile
83.2%
Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org
allows context-dependent attackers to cause a denial of service (crash) via
a negative bottom value.
Bugs
- <https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921>
- <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742922>
- <https://bugs.freedesktop.org/show_bug.cgi?id=67484>
Notes
| Author | Note |
|---|---|
| mdeslaur | xorg server is actually the xorg-server package the xorg package only contains docs |
| jdstrand | patch is straightforward but not yet accepted upstream. Open upstream questions as of 2013/12/18 package for Ubuntu 13.10 is available in saucy-proposed downgrading to low since pixman is already fixed, based on bug feedback |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | xorg-server | < 2:1.11.4-0ubuntu10.17 | UNKNOWN |
Related
openvas
openvas
Debian Security Advisory DSA 2822-1 (xorg-server - integer underflow)
2013-12-18 00:00:00
Mageia: Security Advisory (MGASA-2014-0016)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0051-1)
2021-06-09 00:00:00
nessus
nessus
openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1965-1)
2014-06-13 00:00:00
CentOS 5 / 6 : xorg-x11-server (CESA-2013:1868)
2013-12-23 00:00:00
RHEL 5 / 6 : xorg-x11-server (RHSA-2013:1868)
2013-12-23 00:00:00
mageia
mageia
Updated x11-server package fixes security vulnerability
2014-01-21 20:08:14
cve
cve
CVE-2013-6424
2014-01-18 19:55:02
securityvulns
securityvulns
X.Org integer overflow
2013-12-23 00:00:00
[SECURITY] [DSA 2822-1] xorg-server security update
2013-12-23 00:00:00
debiancve
debiancve
CVE-2013-6424
2014-01-18 19:55:02
prion
prion
Integer overflow
2014-01-18 19:55:00
debian
debian
[SECURITY] [DSA 2822-1] xorg-server security update
2013-12-18 15:26:28
redhat
redhat
(RHSA-2013:1868) Important: xorg-x11-server security update
2013-12-20 00:00:00
centos
centos
xorg security update
2013-12-20 12:23:37
nvd
nvd
CVE-2013-6424
2014-01-18 19:55:02
amazon
amazon
Important: xorg-x11-server
2014-01-14 16:16:00
oraclelinux
oraclelinux
xorg-x11-server security update
2013-12-20 00:00:00
xorg-x11-server security update
2014-12-11 00:00:00
cvelist
cvelist
CVE-2013-6424
2014-01-18 19:00:00
ubuntu
ubuntu
X.Org X server vulnerabilities
2015-02-17 00:00:00
gentoo
gentoo
X.Org X Server: Multiple vulnerabilities
2017-01-25 00:00:00
X.Org Server: Multiple vulnerabilities
2017-10-29 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.009
Percentile
83.2%
Related for UB:CVE-2013-6424