CVE-2013-6425
Fixed in a distro release EPSS 3%
Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.
Products: pixman, canonical ubuntu_linux, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pixman | 0.30.2-2 |
| Debian 13 | pixman | 0.30.2-2 |
| Debian 14 | pixman | 0.30.2-2 |
| Debian 6.0 | pixman | 0.16.4-1+deb6u1 |
| Debian 7 | pixman | 0.26.0-4+deb7u1 |
| Red Hat Enterprise Linux 5 | pixman | 0:0.22.0-2.2.el5_10 |
| Red Hat Enterprise Linux 5 | pixman-debuginfo | 0:0.22.0-2.2.el5_10 |
| Red Hat Enterprise Linux 5 | pixman-devel | 0:0.22.0-2.2.el5_10 |
| Red Hat Enterprise Linux 6 | pixman | 0:0.26.2-5.1.el6_5 |
| Red Hat Enterprise Linux 6 | pixman-debuginfo | 0:0.26.2-5.1.el6_5 |
| Red Hat Enterprise Linux 6 | pixman-devel | 0:0.26.2-5.1.el6_5 |
| Red Hat rhel productivity 5 | pixman | 0:0.22.0-2.2.el5_10 |
| Red Hat rhel productivity 5 | pixman-debuginfo | 0:0.22.0-2.2.el5_10 |
| Red Hat rhel productivity 5 | pixman-devel | 0:0.22.0-2.2.el5_10 |