Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2013-4396

Опубликовано: 08 окт. 2013
Источник: redhat
CVSS2: 7.4
EPSS Низкий

Описание

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7xorg-x11-serverNot affected
Red Hat Enterprise Linux 5xorg-x11-serverFixedRHSA-2013:142615.10.2013
Red Hat Enterprise Linux 6xorg-x11-serverFixedRHSA-2013:142615.10.2013

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1014561xorg-x11-server: use-after-free flaw when handling ImageText requests

EPSS

Процентиль: 81%
0.01572
Низкий

7.4 High

CVSS2

Связанные уязвимости

ubuntu
почти 12 лет назад

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

nvd
почти 12 лет назад

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

debian
почти 12 лет назад

Use-after-free vulnerability in the doImageText function in dix/dixfon ...

github
больше 3 лет назад

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

oracle-oval
почти 12 лет назад

ELSA-2013-1426: xorg-x11-server security update (IMPORTANT)

EPSS

Процентиль: 81%
0.01572
Низкий

7.4 High

CVSS2