CVE-2013-2064

Опубликовано: 15 июн. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106752.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-06/msg00137.html
Third Party Advisory
http://www.debian.org/security/2013/dsa-2686
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/05/23/3
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Vendor Advisory
http://www.securityfocus.com/bid/60148
http://www.ubuntu.com/usn/USN-1855-1
Third Party Advisory
http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106752.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-06/msg00137.html
Third Party Advisory
http://www.debian.org/security/2013/dsa-2686
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/05/23/3
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Vendor Advisory
http://www.securityfocus.com/bid/60148
http://www.ubuntu.com/usn/USN-1855-1
Third Party Advisory
http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:oracle:secure_global_desktop:4.71:*:*:*:*:*:*:*

cpe:2.3:a:oracle:secure_global_desktop:5.2:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*

Конфигурация 5

cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:x:libxcb:*:*:*:*:*:*:*:*

Версия до 1.9 (включая)

cpe:2.3:a:x:libxcb:1.1.90.1:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.1.91:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.1.92:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.1.93:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.2:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.3:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.4:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.5:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.6:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.7:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.8:*:*:*:*:*:*:*

cpe:2.3:a:x:libxcb:1.8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00943

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2013-2064

ubuntu

больше 12 лет назад

Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.

CVE-2013-2064

redhat

больше 12 лет назад

Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.

CVE-2013-2064

debian

больше 12 лет назад

Integer overflow in X.org libxcb 1.9 and earlier allows X servers to t ...

GHSA-7f35-cmpc-qjfq

github

больше 3 лет назад

Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.

BDU:2015-04110

fstec

больше 12 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 76%

0.00943

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189