| Name | CVE-2013-7439 |
| Description | Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-199-1, DSA-3224-1 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| libx11 (PTS) | bullseye (security), bullseye | 2:1.7.2-1+deb11u2 | fixed |
| bookworm, bookworm (security) | 2:1.8.4-2+deb12u2 | fixed |
| sid, trixie | 2:1.8.10-2 | fixed |
The information below is based on the following data on fixed versions.
Notes
http://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=39547d600a13713e15429f49768e54c3173c828d
https://bugs.freedesktop.org/show_bug.cgi?id=56508
https://www.openwall.com/lists/oss-security/2015/04/08/4
The following packages will be recompiled after the release of
the DSA for wheezy and the DLA for squeeze:
libxrender (1:0.9.7-1+deb7u2 / 0.9.6-1+squeeze1+build1)
libxi (TBD / 1.3-8+build1)
libxfixes (TBD / 4.0.5-1+squeeze1+build1)
libxrandr (TBD / 1.3.0-3+squeeze1+build1)
libsdl1.2 (TBD / 1.2.14-6.1+build1)
libxv (TBD / 1.0.5-1+squeeze1+build1)
libxp (TBD / 1.0.0.xsf1-2+squeeze1+build1)
libxext (TBD / 1.1.2-1+squeeze1+build1)
xserver-xorg-video-vmware (TBD / 11.0.1-2+build1)
cairo (TBD / 1.8.10-6+build1)
open-vm-tools (TBD / 8.4.2-261024-1+build1)
wine-gecko-1.4 (wheezy)
list completed by analyzing http://codesearch.debian.net/results/SetReqLen and http://codesearch.debian.net/results/MakeBigReq