CVE-2013-7439

NameCVE-2013-7439
DescriptionMultiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-199-1, DSA-3224-1
NVD severityhigh (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libx11 (PTS)wheezy2:1.5.0-1+deb7u2fixed
wheezy (security)2:1.5.0-1+deb7u4fixed
jessie2:1.6.2-3fixed
buster, sid, stretch2:1.6.4-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libx11source(unstable)2:1.6.0-1high
libx11sourcesqueeze2:1.3.3-4+squeeze2highDLA-199-1
libx11sourcewheezy2:1.5.0-1+deb7u2highDSA-3224-1

Notes

http://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=39547d600a13713e15429f49768e54c3173c828d
https://bugs.freedesktop.org/show_bug.cgi?id=56508
http://www.openwall.com/lists/oss-security/2015/04/08/4
The following packages will be recompiled after the release of
the DSA for wheezy and the DLA for squeeze:
libxrender (1:0.9.7-1+deb7u2 / 0.9.6-1+squeeze1+build1)
libxi (TBD / 1.3-8+build1)
libxfixes (TBD / 4.0.5-1+squeeze1+build1)
libxrandr (TBD / 1.3.0-3+squeeze1+build1)
libsdl1.2 (TBD / 1.2.14-6.1+build1)
libxv (TBD / 1.0.5-1+squeeze1+build1)
libxp (TBD / 1.0.0.xsf1-2+squeeze1+build1)
libxext (TBD / 1.1.2-1+squeeze1+build1)
xserver-xorg-video-vmware (TBD / 11.0.1-2+build1)
cairo (TBD / 1.8.10-6+build1)
open-vm-tools (TBD / 8.4.2-261024-1+build1)
wine-gecko-1.4 (wheezy)
list completed by analyzing http://codesearch.debian.net/results/SetReqLen and http://codesearch.debian.net/results/MakeBigReq

Search for package or bug name: Reporting problems