6.8
CVE-2013-1991
- EPSS 1.26%
- Veröffentlicht 15.06.2013 19:55:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginMultiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XDGAQueryModes and (2) XDGASetMode functions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
X ≫ Libxxf86dga Version <= 1.1.3
X ≫ Libxxf86dga Version1.0.1
X ≫ Libxxf86dga Version1.0.2
X ≫ Libxxf86dga Version1.0.99.1
X ≫ Libxxf86dga Version1.0.99.2
X ≫ Libxxf86dga Version1.1
X ≫ Libxxf86dga Version1.1.1
X ≫ Libxxf86dga Version1.1.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.26% | 0.658 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://www.openwall.com/lists/oss-security/2013/05/23/3
http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106870.html
http://www.debian.org/security/2013/dsa-2690
http://www.ubuntu.com/usn/USN-1869-1