Unrated severityNVD Advisory· Published Jun 15, 2013· Updated Jun 16, 2026
CVE-2013-1997
CVE-2013-1997
Description
Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords4 versionspkg:rpm/opensuse/libX11&distro=openSUSE%20Tumbleweedpkg:rpm/suse/xorg-x11-libX11&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/xorg-x11-libX11&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/xorg-x11-libX11&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4
< 1.6.4-2.1+ 3 more
- (no CPE)range: < 1.6.4-2.1
- (no CPE)range: < 7.4-5.11.68.1
- (no CPE)range: < 7.4-5.11.68.1
- (no CPE)range: < 7.4-5.11.68.1
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.