« Volver al listado

CVE-2013-1998

Estado: ModificadaMedia (6.8)—

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

X.org — Libxi

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-1998",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-06-15T20:55:00.877",
  "references": [
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2683",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/05/23/3",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/60127",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1859-1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.x.org/wiki/Development/Security/Advisory-2013-05-23",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2683",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/05/23/3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/60127",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1859-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.x.org/wiki/Development/Security/Advisory-2013-05-23",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions."
    },
    {
      "lang": "es",
      "value": "Multiples desbordamientos de búfer en X.org libXi v1.7.1 y anteriores permite a los servidores X  causar una denegación de servicio (por caída del servidor) y posiblemente ejecutar código de su elección a través de valores de índice o de longitud debidamente modificados en las funciones (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, y (3) XQueryDeviceState."
    }
  ],
  "lastModified": "2026-06-16T23:52:32.707",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:x.org:libxi:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90DF85F5-D8B6-4396-A139-BE30C590B520",
              "versionEndIncluding": "1.7.1"
            },
            {
              "criteria": "cpe:2.3:a:x.org:libxi:1.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B5AAB71-FFD1-482B-87A3-941B8B4BBA5A"
            },
            {
              "criteria": "cpe:2.3:a:x.org:libxi:1.5.99.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCD677F0-0F98-4550-80C9-E75A5CFD6F20"
            },
            {
              "criteria": "cpe:2.3:a:x.org:libxi:1.5.99.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E3D1B68-BFA2-4173-8843-7F3D29639973"
            },
            {
              "criteria": "cpe:2.3:a:x.org:libxi:1.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3462CFC7-89CB-4867-8DE9-8370A8438497"
            },
            {
              "criteria": "cpe:2.3:a:x.org:libxi:1.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACB8D098-C28D-404B-B315-3DBE36BB1F30"
            },
            {
              "criteria": "cpe:2.3:a:x.org:libxi:1.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "596A9E3D-01C4-439A-A96C-8D1E5378CCDA"
            },
            {
              "criteria": "cpe:2.3:a:x.org:libxi:1.6.99.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "134F8DCD-E77B-4828-BBE4-9B4AAF5AECB2"
            },
            {
              "criteria": "cpe:2.3:a:x.org:libxi:1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E66B05D-F164-4D6C-9CCD-28EC8D3256BD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}