CVE-2013-4396

2013-10-1000:00:00

ubuntu.com

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.7%

JSON

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c
in the xorg-server module before 1.14.4 in X.Org X11 allows remote
authenticated users to cause a denial of service (daemon crash) or possibly
execute arbitrary code via a crafted ImageText request that triggers
memory-allocation failure.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxorg-server< 2:1.11.4-0ubuntu10.14UNKNOWN
ubuntu12.10noarchxorg-server< 2:1.13.0-0ubuntu6.4UNKNOWN
ubuntu13.04noarchxorg-server< 2:1.13.3-0ubuntu6.2UNKNOWN
ubuntu12.04noarchxorg-server-lts-quantal< 2:1.13.0-0ubuntu6.1~precise4UNKNOWN
ubuntu12.04noarchxorg-server-lts-raring< 2:1.13.3-0ubuntu6~precise3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	xorg-server	< 2:1.11.4-0ubuntu10.14	UNKNOWN
ubuntu	12.10	noarch	xorg-server	< 2:1.13.0-0ubuntu6.4	UNKNOWN
ubuntu	13.04	noarch	xorg-server	< 2:1.13.3-0ubuntu6.2	UNKNOWN
ubuntu	12.04	noarch	xorg-server-lts-quantal	< 2:1.13.0-0ubuntu6.1~precise4	UNKNOWN
ubuntu	12.04	noarch	xorg-server-lts-raring	< 2:1.13.3-0ubuntu6~precise3	UNKNOWN