« Volver al listado

CVE-2013-2000

Estado: ModificadaMedia (6.8)—

Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

X — Libxxf86dga

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-2000",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-06-15T20:55:00.917",
  "references": [
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106870.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2690",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/05/23/3",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1869-1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.x.org/wiki/Development/Security/Advisory-2013-05-23",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106870.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2690",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/05/23/3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1869-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.x.org/wiki/Development/Security/Advisory-2013-05-23",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer en X.org libXxf86dga v1.1.3 y anteriores permiten que los servidores X para causar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de valores de índice o de longitud de las funciones (1) XDGAQueryModes y (2) XDGASetMode."
    }
  ],
  "lastModified": "2026-06-16T23:52:33.690",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:x:libxxf86dga:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40DEFBFF-0B67-4223-8205-A841F47ECAFA",
              "versionEndIncluding": "1.1.3"
            },
            {
              "criteria": "cpe:2.3:a:x:libxxf86dga:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3ED235E-8B89-410C-B403-3F877743A480"
            },
            {
              "criteria": "cpe:2.3:a:x:libxxf86dga:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22501B4B-B124-472D-8CF2-82D8A10FF2BF"
            },
            {
              "criteria": "cpe:2.3:a:x:libxxf86dga:1.0.99.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54FEF172-77E2-4FCA-B32F-6E518A22186D"
            },
            {
              "criteria": "cpe:2.3:a:x:libxxf86dga:1.0.99.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C588FCF-1532-4AD0-B040-F0A037A9AC9B"
            },
            {
              "criteria": "cpe:2.3:a:x:libxxf86dga:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EEE79E0-C2D7-4743-9950-024D1AC58531"
            },
            {
              "criteria": "cpe:2.3:a:x:libxxf86dga:1.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C135C7C8-D029-46CF-AC3C-9BEDC235A518"
            },
            {
              "criteria": "cpe:2.3:a:x:libxxf86dga:1.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47039FD0-FEAC-4B31-B160-765E9700C382"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}