Unscored severity · published Jun 15, 2013
CVE-2013-2000
Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libxxf86dga · X
through 1.1.3; 1.0.1; 1.0.2; 1.0.99.1; 1.0.99.2; 1.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2000
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2000
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106870.html
www.debian.org
http://www.debian.org/security/2013/dsa-2690
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/05/23/3
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1869-1
Vendor Advisory
http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
More from Libxxf86dga
–
CVE-2013-1991
Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1)…