p PatchFirst

CVE-2013-2004

CVE-2013-2004

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.

EPSS 1.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libx11 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:1.5.0-1+deb7u1

    Update to 2:1.5.0-1+deb7u1

  • libx11 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:1.5.0-1+deb7u1

    Update to 2:1.5.0-1+deb7u1

  • libx11 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:1.5.0-1+deb7u1

    Update to 2:1.5.0-1+deb7u1

Original sources

Check your server →