7.5

CVE-2013-7439

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
X.Org ≫ Libx11 Version1.0.1
X.Org ≫ Libx11 Version1.0.2
X.Org ≫ Libx11 Version1.0.3
X.Org ≫ Libx11 Version1.1
X.Org ≫ Libx11 Version1.1 Updaterc1
X.Org ≫ Libx11 Version1.1 Updaterc2
X.Org ≫ Libx11 Version1.1.4
X.Org ≫ Libx11 Version1.1.5
X.Org ≫ Libx11 Version1.1.6
X.Org ≫ Libx11 Version1.1.99.1
X.Org ≫ Libx11 Version1.1.99.2
X.Org ≫ Libx11 Version1.2
X.Org ≫ Libx11 Version1.2.1
X.Org ≫ Libx11 Version1.2.2
X.Org ≫ Libx11 Version1.3
X.Org ≫ Libx11 Version1.3.1
X.Org ≫ Libx11 Version1.3.2
X.Org ≫ Libx11 Version1.3.3
X.Org ≫ Libx11 Version1.3.4
X.Org ≫ Libx11 Version1.3.5
X.Org ≫ Libx11 Version1.3.6
X.Org ≫ Libx11 Version1.3.99.901
X.Org ≫ Libx11 Version1.3.99.902
X.Org ≫ Libx11 Version1.3.99.903
X.Org ≫ Libx11 Version1.4.0
X.Org ≫ Libx11 Version1.4.1
X.Org ≫ Libx11 Version1.4.2
X.Org ≫ Libx11 Version1.4.3
X.Org ≫ Libx11 Version1.4.4
X.Org ≫ Libx11 Version1.4.99.901
X.Org ≫ Libx11 Version1.4.99.902
X.Org ≫ Libx11 Version1.5.0
X.Org ≫ Libx11 Version1.5.99.901
X.Org ≫ Libx11 Version1.5.99.902
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Debian ≫ Debian Linux Version7.0
X.Org ≫ X11 Version6.0
X.Org ≫ X11 Version6.1
X.Org ≫ X11 Version6.3
X.Org ≫ X11 Version6.4
X.Org ≫ X11 Version6.5.1
X.Org ≫ X11 Version6.6
X.Org ≫ X11 Version6.7
X.Org ≫ X11 Version6.8.0
X.Org ≫ X11 Version6.8.1
X.Org ≫ X11 Version6.8.2
X.Org ≫ X11 Version6.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.28% 0.898
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://lists.x.org/archives/xorg-announce/2015-April/002561.html
Patch
Vendor Advisory
http://seclists.org/oss-sec/2015/q2/81
Third Party Advisory
VDB Entry
http://www.debian.org/security/2015/dsa-3224
Third Party Advisory
http://www.securityfocus.com/bid/73962
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2568-1
Third Party Advisory
https://bugs.freedesktop.org/show_bug.cgi?id=56508
Issue Tracking