Unrated severityNVD Advisory· Published Apr 16, 2015· Updated May 6, 2026
CVE-2013-7439
CVE-2013-7439
Description
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
Affected products
49cpe:2.3:a:x.org:libx11:1.5.99.901:*:*:*:*:*:*:*+ 33 more
- cpe:2.3:a:x.org:libx11:1.5.99.901:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.5.99.902:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.1:rc2:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.1.99.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.1.99.2:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.99.901:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.99.902:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.3.99.903:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.4.99.901:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.4.99.902:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:libx11:1.5.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.0:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:x.org:x11:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.3:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.4:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.6:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.7:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:x.org:x11:6.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- lists.x.org/archives/xorg-announce/2015-April/002561.htmlnvdPatchVendor Advisory
- seclists.org/oss-sec/2015/q2/81nvdThird Party AdvisoryVDB Entry
- www.debian.org/security/2015/dsa-3224nvdThird Party Advisory
- www.securityfocus.com/bid/73962nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-2568-1nvdThird Party Advisory
- bugs.freedesktop.org/show_bug.cginvdIssue Tracking
- www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlnvd
News mentions
0No linked articles in our index yet.