NVD

Id
38127  
Name
CVE-2013-2004  
Description
The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-06-15  
Modified Date
2013-06-20  
Seq
2013-2004  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194910 38127 CVE-2013-2004 DSA-2693  View
194911 38127 CVE-2013-2004 [oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries  View
194912 38127 CVE-2013-2004 USN-1854-1  View
194913 38127 CVE-2013-2004 http://www.x.org/wiki/Development/Security/Advisory-2013-05-23  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21437 JVNDB-2013-003012 X.org libX11 の GetDatabase 関数および _XimParseStringFile 関数におけるサービス運用妨害 (DoS) の脆弱性 X.org libX11 の (1) GetDatabase 関数および (2) _XimParseStringFile 関数は、ファイルをインクルードするディレクティブを処理する場合、再帰の深さ (recursion depth) を制限しないため、サービス運用妨害 (スタック消費) 状態にされる脆弱性が存在します。 CVE-2013-2004 61946 CVE-2013-2004 38127 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003012.html 2013-05-23 2013-10-31 View