PT-2013-1138 · X.Org Foundation+4 · Libxcursor+22
Published
2013-06-15
·
Updated
2024-06-15
·
CVE-2013-2002
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
libXt versions 1.1.3 and earlier
xorg-server versions prior to 1.14.3-r2
libXext versions 1.3.2 and earlier
libX11 versions 1.6.0 and earlier
libXinerama versions 1.1.3 and earlier
libXfixes versions 5.0.1 and earlier
libXp versions 1.0.2 and earlier
libXtst versions 1.2.2 and earlier
libXi versions 1.7.2 and earlier
libXres versions 1.0.7 and earlier
libXrandr versions 1.4.1 and earlier
libXv versions 1.0.9 and earlier
libXvMC versions 1.0.8 and earlier
libXcursor versions 1.1.14 and earlier
libXxf86vm versions 1.1.3 and earlier
libXxf86dga versions 1.1.4 and earlier
xcb-proto versions 1.8 and earlier
libXrender versions 0.9.8 and earlier
libX11-common versions 1.6.0 and earlier
libXinerama-debuginfo versions 1.1.3 and earlier
libXfixes-debuginfo versions 5.0.1 and earlier
libXext-debuginfo versions 1.3.2 and earlier
libXt-debuginfo versions 1.1.4 and earlier
libXtst-debuginfo versions 1.2.2 and earlier
libXi-debuginfo versions 1.7.2 and earlier
libXres-debuginfo versions 1.0.7 and earlier
libXcursor-debuginfo versions 1.1.14 and earlier
libXp-debuginfo versions 1.0.2 and earlier
libXrandr-debuginfo versions 1.4.1 and earlier
Description
The issue is related to multiple vulnerabilities in various packages of the Red Hat Enterprise Linux and Gentoo Linux operating systems. These vulnerabilities can lead to a disruption of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely. The affected packages include libXt, xorg-server, libXext, libX11, libXinerama, libXfixes, libXp, libXtst, libXi, libXres, libXrandr, libXv, libXvMC, libXcursor, libXxf86vm, libXxf86dga, xcb-proto, libXrender, libX11-common, and others. The vulnerabilities can cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the
XtResourceConfigurationEH function.Recommendations
For libXt versions 1.1.3 and earlier, update to a version later than 1.1.3.
For xorg-server versions prior to 1.14.3-r2, update to version 1.14.3-r2 or later.
For libXext versions 1.3.2 and earlier, update to a version later than 1.3.2.
For libX11 versions 1.6.0 and earlier, update to a version later than 1.6.0.
For libXinerama versions 1.1.3 and earlier, update to a version later than 1.1.3.
For libXfixes versions 5.0.1 and earlier, update to a version later than 5.0.1.
For libXp versions 1.0.2 and earlier, update to a version later than 1.0.2.
For libXtst versions 1.2.2 and earlier, update to a version later than 1.2.2.
For libXi versions 1.7.2 and earlier, update to a version later than 1.7.2.
For libXres versions 1.0.7 and earlier, update to a version later than 1.0.7.
For libXrandr versions 1.4.1 and earlier, update to a version later than 1.4.1.
For libXv versions 1.0.9 and earlier, update to a version later than 1.0.9.
For libXvMC versions 1.0.8 and earlier, update to a version later than 1.0.8.
For libXcursor versions 1.1.14 and earlier, update to a version later than 1.1.14.
For libXxf86vm versions 1.1.3 and earlier, update to a version later than 1.1.3.
For libXxf86dga versions 1.1.4 and earlier, update to a version later than 1.1.4.
For xcb-proto versions 1.8 and earlier, update to a version later than 1.8.
For libXrender versions 0.9.8 and earlier, update to a version later than 0.9.8.
For libX11-common versions 1.6.0 and earlier, update to a version later than 1.6.0.
As a temporary workaround, consider disabling the
XtResourceConfigurationEH function until a patch is available.Fix
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Gentoo Linux
Red Hat
Suse
Libx11
Libx11-Common
Libxcursor
Libxext
Libxfixes
Libxi
Libxinerama
Libxp
Libxrandr
Libxrender
Libxres
Libxt
Libxtst
Libxv
Libxvmc
Libxxf86Dga
Libxxf86Vm
Xcb-Proto
Xorg-Server