7.5

CVE-2013-7439

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
X.Org ≫ Libx11 Version 1.0.1
X.Org ≫ Libx11 Version 1.0.2
X.Org ≫ Libx11 Version 1.0.3
X.Org ≫ Libx11 Version 1.1
X.Org ≫ Libx11 Version 1.1 Update rc1
X.Org ≫ Libx11 Version 1.1 Update rc2
X.Org ≫ Libx11 Version 1.1.4
X.Org ≫ Libx11 Version 1.1.5
X.Org ≫ Libx11 Version 1.1.6
X.Org ≫ Libx11 Version 1.1.99.1
X.Org ≫ Libx11 Version 1.1.99.2
X.Org ≫ Libx11 Version 1.2
X.Org ≫ Libx11 Version 1.2.1
X.Org ≫ Libx11 Version 1.2.2
X.Org ≫ Libx11 Version 1.3
X.Org ≫ Libx11 Version 1.3.1
X.Org ≫ Libx11 Version 1.3.2
X.Org ≫ Libx11 Version 1.3.3
X.Org ≫ Libx11 Version 1.3.4
X.Org ≫ Libx11 Version 1.3.5
X.Org ≫ Libx11 Version 1.3.6
X.Org ≫ Libx11 Version 1.3.99.901
X.Org ≫ Libx11 Version 1.3.99.902
X.Org ≫ Libx11 Version 1.3.99.903
X.Org ≫ Libx11 Version 1.4.0
X.Org ≫ Libx11 Version 1.4.1
X.Org ≫ Libx11 Version 1.4.2
X.Org ≫ Libx11 Version 1.4.3
X.Org ≫ Libx11 Version 1.4.4
X.Org ≫ Libx11 Version 1.4.99.901
X.Org ≫ Libx11 Version 1.4.99.902
X.Org ≫ Libx11 Version 1.5.0
X.Org ≫ Libx11 Version 1.5.99.901
X.Org ≫ Libx11 Version 1.5.99.902
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.10
Debian ≫ Debian Linux Version 7.0
X.Org ≫ X11 Version 6.0
X.Org ≫ X11 Version 6.1
X.Org ≫ X11 Version 6.3
X.Org ≫ X11 Version 6.4
X.Org ≫ X11 Version 6.5.1
X.Org ≫ X11 Version 6.6
X.Org ≫ X11 Version 6.7
X.Org ≫ X11 Version 6.8.0
X.Org ≫ X11 Version 6.8.1
X.Org ≫ X11 Version 6.8.2
X.Org ≫ X11 Version 6.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.25% 0.9
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://lists.x.org/archives/xorg-announce/2015-April/002561.html
Patch
Vendor Advisory
http://seclists.org/oss-sec/2015/q2/81
Third Party Advisory
VDB Entry
http://www.debian.org/security/2015/dsa-3224
Third Party Advisory
http://www.securityfocus.com/bid/73962
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2568-1
Third Party Advisory
https://bugs.freedesktop.org/show_bug.cgi?id=56508
Issue Tracking