CVE

Id
61935  
CVE No.
CVE-2013-1988  
Status
Candidate  
Description
Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620129 61935 CVE-2013-1988 MLIST:[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries  View
620130 61935 CVE-2013-1988 URL:http://www.openwall.com/lists/oss-security/2013/05/23/3  View
620131 61935 CVE-2013-1988 CONFIRM:http://www.x.org/wiki/Development/Security/Advisory-2013-05-23  View
620132 61935 CVE-2013-1988 DEBIAN:DSA-2688  View
620133 61935 CVE-2013-1988 URL:http://www.debian.org/security/2013/dsa-2688  View
620134 61935 CVE-2013-1988 FEDORA:FEDORA-2013-9060  View
620135 61935 CVE-2013-1988 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106880.html  View
620136 61935 CVE-2013-1988 SUSE:openSUSE-SU-2013:1027  View
620137 61935 CVE-2013-1988 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00155.html  View
620138 61935 CVE-2013-1988 UBUNTU:USN-1864-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21423 JVNDB-2013-002998 Mesa の X.org libGLX における整数オーバーフローの脆弱性 Mesa の X.org libGLX には、(1) XF86DRIOpenConnection および (2) XF86DRIGetClientDriverName 関数の処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2013-1993 61935 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002998.html  View