Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-2004
HistoryMay 23, 2013 - 12:00 a.m.

CVE-2013-2004

2013-05-2300:00:00
ubuntu.com
ubuntu.com
7

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.7%

The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11
1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when
processing directives to include files, which allows X servers to cause a
denial of service (stack consumption) via a crafted file.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlibx11< 2:1.3.2-1ubuntu3.1UNKNOWN
ubuntu12.04noarchlibx11< 2:1.4.99.1-0ubuntu2.1UNKNOWN
ubuntu12.10noarchlibx11< 2:1.5.0-1ubuntu0.1UNKNOWN
ubuntu13.04noarchlibx11< 2:1.5.0-1ubuntu1.1UNKNOWN

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.7%