CVE-2013-1995

2013-06-1520:55:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.006

Percentile

79.3%

JSON

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.

Affected configurations

Nvd

Node

x.orglibxiRange≤1.7.1

x.orglibxiMatch1.5.0

x.orglibxiMatch1.5.99.2

x.orglibxiMatch1.5.99.3

x.orglibxiMatch1.6.0

x.orglibxiMatch1.6.1

x.orglibxiMatch1.6.2

x.orglibxiMatch1.6.99.1

x.orglibxiMatch1.7

VendorProductVersionCPE
x.orglibxi*cpe:2.3:a:x.org:libxi:*:*:*:*:*:*:*:*
x.orglibxi1.5.0cpe:2.3:a:x.org:libxi:1.5.0:*:*:*:*:*:*:*
x.orglibxi1.5.99.2cpe:2.3:a:x.org:libxi:1.5.99.2:*:*:*:*:*:*:*
x.orglibxi1.5.99.3cpe:2.3:a:x.org:libxi:1.5.99.3:*:*:*:*:*:*:*
x.orglibxi1.6.0cpe:2.3:a:x.org:libxi:1.6.0:*:*:*:*:*:*:*
x.orglibxi1.6.1cpe:2.3:a:x.org:libxi:1.6.1:*:*:*:*:*:*:*
x.orglibxi1.6.2cpe:2.3:a:x.org:libxi:1.6.2:*:*:*:*:*:*:*
x.orglibxi1.6.99.1cpe:2.3:a:x.org:libxi:1.6.99.1:*:*:*:*:*:*:*
x.orglibxi1.7cpe:2.3:a:x.org:libxi:1.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
x.org	libxi	*	cpe:2.3:a:x.org:libxi::::::::
x.org	libxi	1.5.0	cpe:2.3:a:x.org:libxi:1.5.0:::::::*
x.org	libxi	1.5.99.2	cpe:2.3:a:x.org:libxi:1.5.99.2:::::::*
x.org	libxi	1.5.99.3	cpe:2.3:a:x.org:libxi:1.5.99.3:::::::*
x.org	libxi	1.6.0	cpe:2.3:a:x.org:libxi:1.6.0:::::::*
x.org	libxi	1.6.1	cpe:2.3:a:x.org:libxi:1.6.1:::::::*
x.org	libxi	1.6.2	cpe:2.3:a:x.org:libxi:1.6.2:::::::*
x.org	libxi	1.6.99.1	cpe:2.3:a:x.org:libxi:1.6.99.1:::::::*
x.org	libxi	1.7	cpe:2.3:a:x.org:libxi:1.7:::::::*