CVE-2013-7439
Fixed in a distro release EPSS 4%
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
Products: x.org libx11, canonical ubuntu_linux, debian_linux, x.org x11
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libx11 | 2:1.6.0-1 |
| Debian 13 | libx11 | 2:1.6.0-1 |
| Debian 14 | libx11 | 2:1.6.0-1 |
| Debian 6.0 | libx11 | 2:1.3.3-4+squeeze2 |
| Debian 7 | libx11 | 2:1.5.0-1+deb7u2 |
| Red Hat Enterprise Linux 6 | libX11 | 0:1.6.0-2.2.el6 |
| Red Hat Enterprise Linux 6 | libX11-common | 0:1.6.0-2.2.el6 |
| Red Hat Enterprise Linux 6 | libX11-debuginfo | 0:1.6.0-2.2.el6 |
| Red Hat Enterprise Linux 6 | libX11-devel | 0:1.6.0-2.2.el6 |
| Red Hat Enterprise Linux 6 | libXcursor | 0:1.1.14-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXcursor-debuginfo | 0:1.1.14-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXcursor-devel | 0:1.1.14-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXext | 0:1.3.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXext-debuginfo | 0:1.3.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXext-devel | 0:1.3.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXfixes | 0:5.0.1-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXfixes-debuginfo | 0:5.0.1-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXfixes-devel | 0:5.0.1-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXi | 0:1.7.2-2.2.el6 |
| Red Hat Enterprise Linux 6 | libXi-debuginfo | 0:1.7.2-2.2.el6 |
| Red Hat Enterprise Linux 6 | libXi-devel | 0:1.7.2-2.2.el6 |
| Red Hat Enterprise Linux 6 | libXinerama | 0:1.1.3-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXinerama-debuginfo | 0:1.1.3-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXinerama-devel | 0:1.1.3-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXp | 0:1.0.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXp-debuginfo | 0:1.0.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXp-devel | 0:1.0.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXrandr | 0:1.4.1-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXrandr-debuginfo | 0:1.4.1-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXrandr-devel | 0:1.4.1-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXrender | 0:0.9.8-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXrender-debuginfo | 0:0.9.8-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXrender-devel | 0:0.9.8-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXres | 0:1.0.7-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXres-debuginfo | 0:1.0.7-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXres-devel | 0:1.0.7-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXt | 0:1.1.4-6.1.el6 |
| Red Hat Enterprise Linux 6 | libXt-debuginfo | 0:1.1.4-6.1.el6 |
| Red Hat Enterprise Linux 6 | libXt-devel | 0:1.1.4-6.1.el6 |
| Red Hat Enterprise Linux 6 | libXtst | 0:1.2.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXtst-debuginfo | 0:1.2.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXtst-devel | 0:1.2.2-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXv | 0:1.0.9-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXv-debuginfo | 0:1.0.9-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXv-devel | 0:1.0.9-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXvMC | 0:1.0.8-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXvMC-debuginfo | 0:1.0.8-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXvMC-devel | 0:1.0.8-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXxf86dga | 0:1.1.4-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXxf86dga-debuginfo | 0:1.1.4-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXxf86dga-devel | 0:1.1.4-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXxf86vm | 0:1.1.3-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXxf86vm-debuginfo | 0:1.1.3-2.1.el6 |
| Red Hat Enterprise Linux 6 | libXxf86vm-devel | 0:1.1.3-2.1.el6 |
| Red Hat Enterprise Linux 6 | libdmx | 0:1.1.3-3.el6 |
| Red Hat Enterprise Linux 6 | libdmx-debuginfo | 0:1.1.3-3.el6 |
| Red Hat Enterprise Linux 6 | libdmx-devel | 0:1.1.3-3.el6 |
| Red Hat Enterprise Linux 6 | libxcb | 0:1.9.1-2.el6 |
| Red Hat Enterprise Linux 6 | libxcb-debuginfo | 0:1.9.1-2.el6 |
| Red Hat Enterprise Linux 6 | libxcb-devel | 0:1.9.1-2.el6 |
| Red Hat Enterprise Linux 6 | libxcb-doc | 0:1.9.1-2.el6 |
| Red Hat Enterprise Linux 6 | libxcb-python | 0:1.9.1-2.el6 |
| Red Hat Enterprise Linux 6 | xcb-proto | 0:1.8-3.el6 |
| Red Hat Enterprise Linux 6 | xkeyboard-config | 0:2.11-1.el6 |
| Red Hat Enterprise Linux 6 | xkeyboard-config-devel | 0:2.11-1.el6 |
| Red Hat Enterprise Linux 6 | xorg-x11-proto-devel | 0:7.7-9.el6 |
| Red Hat Enterprise Linux 6 | xorg-x11-xtrans-devel | 0:1.3.4-1.el6 |
| SUSE Linux Enterprise Desktop 11 SP3 | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Server 11 SP3 | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | xorg-x11-libX11 | 7.4-5.11.15.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | xorg-x11-libX11 | 7.4-5.11.15.1 |
| Ubuntu 14.04 LTS | libxrender | 1:0.9.8-1build0.14.04.1 |