Vulnerability-Lookup

CVE-2013-7439 (GCVE-0-2013-7439)

Vulnerability from cvelistv5 – Published: 2015-04-16 14:00 – Updated: 2024-08-06 18:09

Summary

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

Severity

No CVSS data available.

CWE

Assigner

canonical mitre root

References

7 references

URL	Tags
http://www.ubuntu.com/usn/USN-2568-1	vendor-advisoryx_refsource_UBUNTU
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/73962	vdb-entryx_refsource_BID
http://www.debian.org/security/2015/dsa-3224	vendor-advisoryx_refsource_DEBIAN
http://seclists.org/oss-sec/2015/q2/81	mailing-listx_refsource_MLIST
http://lists.x.org/archives/xorg-announce/2015-Ap…	mailing-listx_refsource_MLIST
https://bugs.freedesktop.org/show_bug.cgi?id=56508	x_refsource_CONFIRM

Date Public

2015-04-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:09:16.255Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2568-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2568-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "73962",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73962"
          },
          {
            "name": "DSA-3224",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3224"
          },
          {
            "name": "[oss-security] 20150409 Re: CVE Request: libX11: buffer overflow in MakeBigReq macro",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2015/q2/81"
          },
          {
            "name": "[xorg-announce] 20150414 [ANNOUNCE] X.Org Security Advisory: Buffer overflow in MakeBigReq macro",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.x.org/archives/xorg-announce/2015-April/002561.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.freedesktop.org/show_bug.cgi?id=56508"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01.000Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "name": "USN-2568-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2568-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "73962",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73962"
        },
        {
          "name": "DSA-3224",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3224"
        },
        {
          "name": "[oss-security] 20150409 Re: CVE Request: libX11: buffer overflow in MakeBigReq macro",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2015/q2/81"
        },
        {
          "name": "[xorg-announce] 20150414 [ANNOUNCE] X.Org Security Advisory: Buffer overflow in MakeBigReq macro",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.x.org/archives/xorg-announce/2015-April/002561.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.freedesktop.org/show_bug.cgi?id=56508"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "ID": "CVE-2013-7439",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2568-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2568-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "73962",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73962"
            },
            {
              "name": "DSA-3224",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3224"
            },
            {
              "name": "[oss-security] 20150409 Re: CVE Request: libX11: buffer overflow in MakeBigReq macro",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2015/q2/81"
            },
            {
              "name": "[xorg-announce] 20150414 [ANNOUNCE] X.Org Security Advisory: Buffer overflow in MakeBigReq macro",
              "refsource": "MLIST",
              "url": "http://lists.x.org/archives/xorg-announce/2015-April/002561.html"
            },
            {
              "name": "https://bugs.freedesktop.org/show_bug.cgi?id=56508",
              "refsource": "CONFIRM",
              "url": "https://bugs.freedesktop.org/show_bug.cgi?id=56508"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2013-7439",
    "datePublished": "2015-04-16T14:00:00.000Z",
    "dateReserved": "2015-04-09T00:00:00.000Z",
    "dateUpdated": "2024-08-06T18:09:16.255Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2013-7439",
      "date": "2026-09-14",
      "epss": "0.04251",
      "percentile": "0.90491"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5A6C80B2-13EE-4922-B8F8-4B68A6D4954E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4289D5DB-1E90-4B70-9F95-D201F1A77642\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1E911824-A0DC-45DD-A0A3-BE38CD611F0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9CBD6963-AB40-4514-A346-9DC0B5733972\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.1:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"ECAD3BC1-91CB-4257-B4FB-53D58A930F0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.1:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"DC2D3F5F-7A72-4098-B6C5-D3883DECEBBF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CE3CEE63-E49F-4AC8-BB3F-19BE9595B09C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.1.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FFE651C6-8CC5-4884-9810-F7882A7AA261\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.1.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9FB5D754-E3F9-41D4-8756-22CF8610D4F6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.1.99.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0900F3F3-C0EB-4FC2-B19C-20E8162A8C34\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.1.99.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EF2589E9-0E1D-4B3D-A268-BAE67B52D3EB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B2D4940A-D133-425A-A6FE-151C2D6427C7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E1D2A60E-0991-44F2-8D4A-2BD4CD8FAD6F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6938345D-FFFE-4161-805A-AFFF56E4331E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EA5B6870-141B-4A49-989F-061128A28C83\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"26CD8824-0670-4FE4-A5B6-62D5281C19FC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"91C4297A-58CA-4779-BEE0-0DBD52E022DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"47065C1A-306F-4236-8F01-453152725D86\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3967865F-AC68-491F-B56F-F161AC3CB72A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"32C9067E-D8E1-4ED7-89CC-8F01DA80E6D5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"578B20A3-DA4A-4740-93C3-57282B470F4C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.99.901:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D5B2326-3043-420E-8F76-6FD362796BC0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.99.902:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B27B9C7-1FBB-455C-A7CE-30F60B9087ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.3.99.903:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1E7FE201-B7F4-43C5-9C98-2CC3E3A367EA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F99CEB2-8B11-4216-86B8-A06CF4A9570B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4DF82DF6-21AC-47D6-AA45-438E3AC2897C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDC0E685-1B58-4D1A-9A11-D52DE78D050B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"73EBE149-70E4-43C4-BDDE-F973B4998D82\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.4.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0EBB4B90-B8C4-4EAB-9C23-0CE0EA44EF7B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.4.99.901:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E5176602-D128-44D3-83ED-60347FE562CC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.4.99.902:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7DFBF78B-A5B6-46CD-AF4C-6FBF7E94234E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80C945D3-B551-4DFC-9427-FDEAE02D0310\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.5.99.901:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E88F8A47-2B2A-42A6-8235-F23090115110\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:libx11:1.5.99.902:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"452F73F1-56B0-4C80-95FA-C4326AA8CA03\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B5A6F2F3-4894-4392-8296-3B8DD2679084\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"49A63F39-30BE-443F-AF10-6245587D3359\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16F59A04-14CF-49E2-9973-645477EA09DA\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"30CD0E34-FA00-462D-AE22-21CC2ADA21EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4773A025-4C8C-4ACA-8467-39CE5AAC8698\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"52074B65-A55E-4B37-91A0-54A3B2FD66F8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5858A301-385C-4517-95D8-BF597F3E33E0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FCD3545A-125E-4269-B376-66A36640479F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"06302ADC-1BEB-4EBE-8588-2EB4785611C5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CD8916AC-DE3B-4BE0-9430-3F234A0170A9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"41618E6A-2603-43F6-B57F-3FAE61107BB2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.8.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2A4F4228-CB20-4701-AF05-6C0C89CE66E0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.8.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0930AE4-7368-4AA7-BEE2-787435CA801B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:x.org:x11:6.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F83E5829-42E8-42D5-9AAF-7B65F9DCD081\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.\"}, {\"lang\": \"es\", \"value\": \"M\\u00faltiples errores de superaci\\u00f3n de l\\u00edmite (off-by-one) en los macros (1) MakeBigReq y (2) SetReqLen en include/X11/Xlibint.h en X11R6.x y libX11 anterior a 1.6.0 permiten a atacantes remotos tener un impacto no especificado a trav\\u00e9s de una solicitud manipulada, lo que provoca un desbordamiento de buffer.\"}]",
      "id": "CVE-2013-7439",
      "lastModified": "2024-11-21T02:01:00.020",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2015-04-16T14:59:00.070",
      "references": "[{\"url\": \"http://lists.x.org/archives/xorg-announce/2015-April/002561.html\", \"source\": \"security@ubuntu.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://seclists.org/oss-sec/2015/q2/81\", \"source\": \"security@ubuntu.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3224\", \"source\": \"security@ubuntu.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html\", \"source\": \"security@ubuntu.com\"}, {\"url\": \"http://www.securityfocus.com/bid/73962\", \"source\": \"security@ubuntu.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2568-1\", \"source\": \"security@ubuntu.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugs.freedesktop.org/show_bug.cgi?id=56508\", \"source\": \"security@ubuntu.com\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"http://lists.x.org/archives/xorg-announce/2015-April/002561.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://seclists.org/oss-sec/2015/q2/81\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3224\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/73962\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2568-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugs.freedesktop.org/show_bug.cgi?id=56508\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}]",
      "sourceIdentifier": "security@ubuntu.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-189\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2013-7439\",\"sourceIdentifier\":\"security@ubuntu.com\",\"published\":\"2015-04-16T14:59:00.070\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples errores de superaci\u00f3n de l\u00edmite (off-by-one) en los macros (1) MakeBigReq y (2) SetReqLen en include/X11/Xlibint.h en X11R6.x y libX11 anterior a 1.6.0 permiten a atacantes remotos tener un impacto no especificado a trav\u00e9s de una solicitud manipulada, lo que provoca un desbordamiento de buffer.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-189\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A6C80B2-13EE-4922-B8F8-4B68A6D4954E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4289D5DB-1E90-4B70-9F95-D201F1A77642\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E911824-A0DC-45DD-A0A3-BE38CD611F0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CBD6963-AB40-4514-A346-9DC0B5733972\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECAD3BC1-91CB-4257-B4FB-53D58A930F0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC2D3F5F-7A72-4098-B6C5-D3883DECEBBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE3CEE63-E49F-4AC8-BB3F-19BE9595B09C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFE651C6-8CC5-4884-9810-F7882A7AA261\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FB5D754-E3F9-41D4-8756-22CF8610D4F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.1.99.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0900F3F3-C0EB-4FC2-B19C-20E8162A8C34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.1.99.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF2589E9-0E1D-4B3D-A268-BAE67B52D3EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2D4940A-D133-425A-A6FE-151C2D6427C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1D2A60E-0991-44F2-8D4A-2BD4CD8FAD6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6938345D-FFFE-4161-805A-AFFF56E4331E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA5B6870-141B-4A49-989F-061128A28C83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26CD8824-0670-4FE4-A5B6-62D5281C19FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91C4297A-58CA-4779-BEE0-0DBD52E022DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47065C1A-306F-4236-8F01-453152725D86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3967865F-AC68-491F-B56F-F161AC3CB72A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32C9067E-D8E1-4ED7-89CC-8F01DA80E6D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"578B20A3-DA4A-4740-93C3-57282B470F4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.99.901:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D5B2326-3043-420E-8F76-6FD362796BC0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.99.902:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B27B9C7-1FBB-455C-A7CE-30F60B9087ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.3.99.903:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E7FE201-B7F4-43C5-9C98-2CC3E3A367EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F99CEB2-8B11-4216-86B8-A06CF4A9570B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DF82DF6-21AC-47D6-AA45-438E3AC2897C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDC0E685-1B58-4D1A-9A11-D52DE78D050B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73EBE149-70E4-43C4-BDDE-F973B4998D82\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EBB4B90-B8C4-4EAB-9C23-0CE0EA44EF7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.4.99.901:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5176602-D128-44D3-83ED-60347FE562CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.4.99.902:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7DFBF78B-A5B6-46CD-AF4C-6FBF7E94234E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80C945D3-B551-4DFC-9427-FDEAE02D0310\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.5.99.901:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E88F8A47-2B2A-42A6-8235-F23090115110\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:libx11:1.5.99.902:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"452F73F1-56B0-4C80-95FA-C4326AA8CA03\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49A63F39-30BE-443F-AF10-6245587D3359\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30CD0E34-FA00-462D-AE22-21CC2ADA21EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4773A025-4C8C-4ACA-8467-39CE5AAC8698\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52074B65-A55E-4B37-91A0-54A3B2FD66F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5858A301-385C-4517-95D8-BF597F3E33E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCD3545A-125E-4269-B376-66A36640479F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06302ADC-1BEB-4EBE-8588-2EB4785611C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD8916AC-DE3B-4BE0-9430-3F234A0170A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"41618E6A-2603-43F6-B57F-3FAE61107BB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A4F4228-CB20-4701-AF05-6C0C89CE66E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0930AE4-7368-4AA7-BEE2-787435CA801B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:x.org:x11:6.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F83E5829-42E8-42D5-9AAF-7B65F9DCD081\"}]}]}],\"references\":[{\"url\":\"http://lists.x.org/archives/xorg-announce/2015-April/002561.html\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://seclists.org/oss-sec/2015/q2/81\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3224\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html\",\"source\":\"security@ubuntu.com\"},{\"url\":\"http://www.securityfocus.com/bid/73962\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2568-1\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.freedesktop.org/show_bug.cgi?id=56508\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"http://lists.x.org/archives/xorg-announce/2015-April/002561.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://seclists.org/oss-sec/2015/q2/81\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3224\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/73962\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2568-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.freedesktop.org/show_bug.cgi?id=56508\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-27T11:29:23+00:00",
      "cve": "CVE-2013-7439",
      "id": "CVE-2013-7439",
      "initial_release_date": "2013-03-09T00:00:00+00:00",
      "product_status:fixed": "854",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "4",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "libX11: buffer overflow in MakeBigReq macro",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-7439.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-02T09:07:29Z",
      "cve": "CVE-2013-7439",
      "id": "CVE-2013-7439",
      "initial_release_date": "2023-02-15T05:33:11Z",
      "product_status:known_not_affected": "55",
      "product_status:recommended": "40",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2013-7439",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2013-7439.json",
      "version": "11"
    }
  }
}

CNVD-2015-02532

Vulnerability from cnvd - Published: 2015-04-20

Title

X.Org libX11 'MakeBigReq()'Macro缓冲区溢出漏洞

Description

libX11是X.Org基金会运作的X11（X Window系统）客户端库。 X.Org libX11 'MakeBigReq()'Macro存在缓冲区溢出漏洞。该漏洞源于将用户提供的数据复制到一个充分大小的缓冲区之前未能充分检查。攻击者可以利用此漏洞以应用程序的上下文中执行任意代码。

Severity

高

Patch Name

X.Org libX11 'MakeBigReq()'Macro缓冲区溢出漏洞的补丁

Patch Description

libX11是X.Org基金会运作的X11（X Window系统）客户端库。 X.Org libX11 'MakeBigReq()'Macro存在缓冲区溢出漏洞。该漏洞源于将用户提供的数据复制到一个充分大小的缓冲区之前未能充分检查。攻击者可以利用此漏洞以应用程序的上下文中执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=39547d600a13713e15429f49768e54c3173c828d

Reference

http://www.debian.org/security/2015/dsa-3224 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7439

Impacted products

Name
['X.Org X11R6.x <1.6.0', 'X.Org libX11 <1.6.0']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "73962"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2013-7439"
    }
  },
  "description": "libX11\u662fX.Org\u57fa\u91d1\u4f1a\u8fd0\u4f5c\u7684X11\uff08X Window\u7cfb\u7edf\uff09\u5ba2\u6237\u7aef\u5e93\u3002\r\n\r\nX.Org libX11 \u0027MakeBigReq()\u0027Macro\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5c06\u7528\u6237\u63d0\u4f9b\u7684\u6570\u636e\u590d\u5236\u5230\u4e00\u4e2a\u5145\u5206\u5927\u5c0f\u7684\u7f13\u51b2\u533a\u4e4b\u524d\u672a\u80fd\u5145\u5206\u68c0\u67e5\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\u4ee5\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Marc Deslauriers",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=39547d600a13713e15429f49768e54c3173c828d",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-02532",
  "openTime": "2015-04-20",
  "patchDescription": "libX11\u662fX.Org\u57fa\u91d1\u4f1a\u8fd0\u4f5c\u7684X11\uff08X Window\u7cfb\u7edf\uff09\u5ba2\u6237\u7aef\u5e93\u3002\r\nX.Org libX11 \u0027MakeBigReq()\u0027Macro\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5c06\u7528\u6237\u63d0\u4f9b\u7684\u6570\u636e\u590d\u5236\u5230\u4e00\u4e2a\u5145\u5206\u5927\u5c0f\u7684\u7f13\u51b2\u533a\u4e4b\u524d\u672a\u80fd\u5145\u5206\u68c0\u67e5\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\u4ee5\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "X.Org libX11 \u0027MakeBigReq()\u0027Macro\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "X.Org X11R6.x  \u003c1.6.0",
      "X.Org libX11 \u003c1.6.0"
    ]
  },
  "referenceLink": "http://www.debian.org/security/2015/dsa-3224 \r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7439",
  "serverity": "\u9ad8",
  "submitTime": "2015-04-17",
  "title": "X.Org libX11 \u0027MakeBigReq()\u0027Macro\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}

FKIE_CVE-2013-7439

Vulnerability from fkie_nvd - Published: 2015-04-16 14:59 - Updated: 2026-06-17 00:01

Severity

Summary

References

URL	Tags
security@ubuntu.com	http://lists.x.org/archives/xorg-announce/2015-April/002561.html	Patch, Vendor Advisory
security@ubuntu.com	http://seclists.org/oss-sec/2015/q2/81	Third Party Advisory, VDB Entry
security@ubuntu.com	http://www.debian.org/security/2015/dsa-3224	Third Party Advisory
security@ubuntu.com	http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
security@ubuntu.com	http://www.securityfocus.com/bid/73962	Third Party Advisory, VDB Entry
security@ubuntu.com	http://www.ubuntu.com/usn/USN-2568-1	Third Party Advisory
security@ubuntu.com	https://bugs.freedesktop.org/show_bug.cgi?id=56508	Issue Tracking
af854a3a-2127-422b-91ae-364da2661108	http://lists.x.org/archives/xorg-announce/2015-April/002561.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/oss-sec/2015/q2/81	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2015/dsa-3224	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/73962	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2568-1	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://bugs.freedesktop.org/show_bug.cgi?id=56508	Issue Tracking

Impacted products

Vendor	Product	Version
x.org	libx11	1.0.1
x.org	libx11	1.0.2
x.org	libx11	1.0.3
x.org	libx11	1.1
x.org	libx11	1.1
x.org	libx11	1.1
x.org	libx11	1.1.4
x.org	libx11	1.1.5
x.org	libx11	1.1.6
x.org	libx11	1.1.99.1
x.org	libx11	1.1.99.2
x.org	libx11	1.2
x.org	libx11	1.2.1
x.org	libx11	1.2.2
x.org	libx11	1.3
x.org	libx11	1.3.1
x.org	libx11	1.3.2
x.org	libx11	1.3.3
x.org	libx11	1.3.4
x.org	libx11	1.3.5
x.org	libx11	1.3.6
x.org	libx11	1.3.99.901
x.org	libx11	1.3.99.902
x.org	libx11	1.3.99.903
x.org	libx11	1.4.0
x.org	libx11	1.4.1
x.org	libx11	1.4.2
x.org	libx11	1.4.3
x.org	libx11	1.4.4
x.org	libx11	1.4.99.901
x.org	libx11	1.4.99.902
x.org	libx11	1.5.0
x.org	libx11	1.5.99.901
x.org	libx11	1.5.99.902
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	14.10
debian	debian_linux	7.0
x.org	x11	6.0
x.org	x11	6.1
x.org	x11	6.3
x.org	x11	6.4
x.org	x11	6.5.1
x.org	x11	6.6
x.org	x11	6.7
x.org	x11	6.8.0
x.org	x11	6.8.1
x.org	x11	6.8.2
x.org	x11	6.9

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "security@ubuntu.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A6C80B2-13EE-4922-B8F8-4B68A6D4954E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4289D5DB-1E90-4B70-9F95-D201F1A77642",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E911824-A0DC-45DD-A0A3-BE38CD611F0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9CBD6963-AB40-4514-A346-9DC0B5733972",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.1:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "ECAD3BC1-91CB-4257-B4FB-53D58A930F0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.1:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "DC2D3F5F-7A72-4098-B6C5-D3883DECEBBF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE3CEE63-E49F-4AC8-BB3F-19BE9595B09C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFE651C6-8CC5-4884-9810-F7882A7AA261",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FB5D754-E3F9-41D4-8756-22CF8610D4F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.1.99.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0900F3F3-C0EB-4FC2-B19C-20E8162A8C34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.1.99.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF2589E9-0E1D-4B3D-A268-BAE67B52D3EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2D4940A-D133-425A-A6FE-151C2D6427C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1D2A60E-0991-44F2-8D4A-2BD4CD8FAD6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6938345D-FFFE-4161-805A-AFFF56E4331E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA5B6870-141B-4A49-989F-061128A28C83",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "26CD8824-0670-4FE4-A5B6-62D5281C19FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "91C4297A-58CA-4779-BEE0-0DBD52E022DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "47065C1A-306F-4236-8F01-453152725D86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "3967865F-AC68-491F-B56F-F161AC3CB72A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "32C9067E-D8E1-4ED7-89CC-8F01DA80E6D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "578B20A3-DA4A-4740-93C3-57282B470F4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.99.901:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D5B2326-3043-420E-8F76-6FD362796BC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.99.902:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B27B9C7-1FBB-455C-A7CE-30F60B9087ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.3.99.903:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E7FE201-B7F4-43C5-9C98-2CC3E3A367EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F99CEB2-8B11-4216-86B8-A06CF4A9570B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DF82DF6-21AC-47D6-AA45-438E3AC2897C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDC0E685-1B58-4D1A-9A11-D52DE78D050B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "73EBE149-70E4-43C4-BDDE-F973B4998D82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EBB4B90-B8C4-4EAB-9C23-0CE0EA44EF7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.4.99.901:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5176602-D128-44D3-83ED-60347FE562CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.4.99.902:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DFBF78B-A5B6-46CD-AF4C-6FBF7E94234E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "80C945D3-B551-4DFC-9427-FDEAE02D0310",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.5.99.901:*:*:*:*:*:*:*",
              "matchCriteriaId": "E88F8A47-2B2A-42A6-8235-F23090115110",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:libx11:1.5.99.902:*:*:*:*:*:*:*",
              "matchCriteriaId": "452F73F1-56B0-4C80-95FA-C4326AA8CA03",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "49A63F39-30BE-443F-AF10-6245587D3359",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "30CD0E34-FA00-462D-AE22-21CC2ADA21EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4773A025-4C8C-4ACA-8467-39CE5AAC8698",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "52074B65-A55E-4B37-91A0-54A3B2FD66F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "5858A301-385C-4517-95D8-BF597F3E33E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCD3545A-125E-4269-B376-66A36640479F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "06302ADC-1BEB-4EBE-8588-2EB4785611C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD8916AC-DE3B-4BE0-9430-3F234A0170A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "41618E6A-2603-43F6-B57F-3FAE61107BB2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A4F4228-CB20-4701-AF05-6C0C89CE66E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0930AE4-7368-4AA7-BEE2-787435CA801B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:x.org:x11:6.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "F83E5829-42E8-42D5-9AAF-7B65F9DCD081",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples errores de superaci\u00f3n de l\u00edmite (off-by-one) en los macros (1) MakeBigReq y (2) SetReqLen en include/X11/Xlibint.h en X11R6.x y libX11 anterior a 1.6.0 permiten a atacantes remotos tener un impacto no especificado a trav\u00e9s de una solicitud manipulada, lo que provoca un desbordamiento de buffer."
    }
  ],
  "id": "CVE-2013-7439",
  "lastModified": "2026-06-17T00:01:57.460",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-04-16T14:59:00.070",
  "references": [
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://lists.x.org/archives/xorg-announce/2015-April/002561.html"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://seclists.org/oss-sec/2015/q2/81"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2015/dsa-3224"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/73962"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2568-1"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugs.freedesktop.org/show_bug.cgi?id=56508"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://lists.x.org/archives/xorg-announce/2015-April/002561.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://seclists.org/oss-sec/2015/q2/81"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2015/dsa-3224"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/73962"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2568-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugs.freedesktop.org/show_bug.cgi?id=56508"
    }
  ],
  "sourceIdentifier": "security@ubuntu.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-RQ5M-5V65-Q84Q

Vulnerability from github – Published: 2022-05-17 03:47 – Updated: 2022-05-17 03:47

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2013-7439"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2015-04-16T14:59:00Z",
    "severity": "HIGH"
  },
  "details": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.",
  "id": "GHSA-rq5m-5v65-q84q",
  "modified": "2022-05-17T03:47:55Z",
  "published": "2022-05-17T03:47:55Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7439"
    },
    {
      "type": "WEB",
      "url": "https://bugs.freedesktop.org/show_bug.cgi?id=56508"
    },
    {
      "type": "WEB",
      "url": "http://lists.x.org/archives/xorg-announce/2015-April/002561.html"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/oss-sec/2015/q2/81"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2015/dsa-3224"
    },
    {
      "type": "WEB",
      "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/73962"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2568-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2013-7439

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2013-7439

Aliases

CVE-2013-7439

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2013-7439",
    "description": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.",
    "id": "GSD-2013-7439",
    "references": [
      "https://www.suse.com/security/cve/CVE-2013-7439.html",
      "https://www.debian.org/security/2015/dsa-3224",
      "https://access.redhat.com/errata/RHSA-2014:1436",
      "https://ubuntu.com/security/CVE-2013-7439"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2013-7439"
      ],
      "details": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.",
      "id": "GSD-2013-7439",
      "modified": "2023-12-13T01:22:18.845397Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@ubuntu.com",
        "ID": "CVE-2013-7439",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "USN-2568-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2568-1"
          },
          {
            "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
            "refsource": "CONFIRM",
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "73962",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/73962"
          },
          {
            "name": "DSA-3224",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2015/dsa-3224"
          },
          {
            "name": "[oss-security] 20150409 Re: CVE Request: libX11: buffer overflow in MakeBigReq macro",
            "refsource": "MLIST",
            "url": "http://seclists.org/oss-sec/2015/q2/81"
          },
          {
            "name": "[xorg-announce] 20150414 [ANNOUNCE] X.Org Security Advisory: Buffer overflow in MakeBigReq macro",
            "refsource": "MLIST",
            "url": "http://lists.x.org/archives/xorg-announce/2015-April/002561.html"
          },
          {
            "name": "https://bugs.freedesktop.org/show_bug.cgi?id=56508",
            "refsource": "CONFIRM",
            "url": "https://bugs.freedesktop.org/show_bug.cgi?id=56508"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.4.99.902:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.4.99.901:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.99.901:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.1.99.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.1:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.4.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.4.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.1.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.1:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.5.99.902:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.4.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.4.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.1.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.1.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.5.99.901:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.99.903:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.99.902:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:libx11:1.1.99.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.8.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:x.org:x11:6.8.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "ID": "CVE-2013-7439"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-189"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3224",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2015/dsa-3224"
            },
            {
              "name": "USN-2568-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-2568-1"
            },
            {
              "name": "[oss-security] 20150409 Re: CVE Request: libX11: buffer overflow in MakeBigReq macro",
              "refsource": "MLIST",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://seclists.org/oss-sec/2015/q2/81"
            },
            {
              "name": "[xorg-announce] 20150414 [ANNOUNCE] X.Org Security Advisory: Buffer overflow in MakeBigReq macro",
              "refsource": "MLIST",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://lists.x.org/archives/xorg-announce/2015-April/002561.html"
            },
            {
              "name": "https://bugs.freedesktop.org/show_bug.cgi?id=56508",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking"
              ],
              "url": "https://bugs.freedesktop.org/show_bug.cgi?id=56508"
            },
            {
              "name": "73962",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/73962"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2016-10-18T03:43Z",
      "publishedDate": "2015-04-16T14:59Z"
    }
  }
}

RHSA-2014:1436

Vulnerability from csaf_redhat - Published: 2014-10-13 21:06 - Updated: 2026-06-27 12:29

Summary

Red Hat Security Advisory: X11 client libraries security, bug fix, and enhancement update

Severity

Moderate

Scope

27 vulnerabilities in this advisory, including CVE-2013-7439.

CVE-2013-7439

2.9 ()


                
                  AV:A/AC:H/Au:S/C:P/I:N/A:P

Fixed: 854 products

https://access.redhat.com/errata/RHSA-2014:1436

Open the full advisory

RHSA-2014_1436

Vulnerability from csaf_redhat - Published: 2014-10-13 21:06 - Updated: 2024-11-22 07:55

Summary

Red Hat Security Advisory: X11 client libraries security, bug fix, and enhancement update

Severity

Moderate

Scope

27 vulnerabilities in this advisory, including CVE-2013-7439.

CVE-2013-7439

2.9 ()


                
                  AV:A/AC:H/Au:S/C:P/I:N/A:P

Fixed: 2166 products

https://access.redhat.com/errata/RHSA-2014:1436

Open the full advisory

SUSE-SU-2015:1334-1

Vulnerability from csaf_suse - Published: 2015-07-17 09:57 - Updated: 2015-07-17 09:57

Summary

Security update for xorg-x11-libX11

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2013-7439.

CVE-2013-7439

Recommended: 82 products

Open the full advisory

ubuntu-cve-2013-7439

Vulnerability from osv_ubuntu

Published

2015-04-09 00:00

Modified

2026-04-22 07:37

Summary

Details

Severity

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2013-7439	REPORT
	http://www.openwall.com/lists/oss-security/2015/04/08/4	REPORT
	https://ubuntu.com/security/notices/USN-2568-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2013-7439	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libxrender1",
            "binary_version": "1:0.9.8-1build0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "libxrender",
        "purl": "pkg:deb/ubuntu/libxrender@1:0.9.8-1build0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:0.9.8-1build0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:0.9.8-1"
      ]
    }
  ],
  "aliases": [],
  "details": "Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.",
  "id": "UBUNTU-CVE-2013-7439",
  "modified": "2026-04-22T07:37:40Z",
  "published": "2015-04-09T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-7439"
    },
    {
      "type": "REPORT",
      "url": "http://www.openwall.com/lists/oss-security/2015/04/08/4"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2568-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7439"
    }
  ],
  "related": [
    "USN-2568-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2013-7439"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2013-7439 (GCVE-0-2013-7439)

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature