Published: 15/06/2013 Updated: 30/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in X.org libxcb 1.9 and previous versions allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 7.0
debian debian linux 6.0
oracle secure global desktop 4.71
oracle secure global desktop 5.2
canonical ubuntu linux 13.04
canonical ubuntu linux 10.04
canonical ubuntu linux 12.04
canonical ubuntu linux 12.10
opensuse opensuse 12.3
opensuse opensuse 12.2
fedoraproject fedora 19
x libxcb
x libxcb 1.8.1
x libxcb 1.8
x libxcb 1.1.93
x libxcb 1.1.92
x libxcb 1.5
x libxcb 1.4
x libxcb 1.3
x libxcb 1.2
x libxcb 1.7
x libxcb 1.6
x libxcb 1.1.90.1
x libxcb 1.1.91

Several security issues were fixed in libxcb ...

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the Xorg graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to privilege escalation or denial of service For the oldstab ...

Integer overflow in Xorg libxcb 19 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function ...

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially escalate their privileges on the system (CVE-2013-1981 ...

Integer overflow in Xorg libxcb 19 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function ...

CWE-189 http://www.x.org/wiki/Development/Security/Advisory-2013-05-23 http://www.openwall.com/lists/oss-security/2013/05/23/3 http://lists.opensuse.org/opensuse-updates/2013-06/msg00137.html http://www.debian.org/security/2013/dsa-2686 http://www.ubuntu.com/usn/USN-1855-1 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106752.html http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html http://www.securityfocus.com/bid/60148 https://usn.ubuntu.com/1855-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-2064

CVE-2013-2064

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect