Main Vulnerability Database Vulnerabilities #VU82525

Buffer overflow in libx11 - CVE-2013-7439

Published: October 27, 2023

Vulnerability identifier: #VU82525

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2013-7439

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to multiple off-by-one errors in the MakeBigReq and SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11. A remote attacker can create a specially crafted request, trigger buffer overflow and execute arbitrary code on the target system.

Affected software

libx11
IBM BladeCenter Advanced Management Module

How to mitigate CVE-2013-7439

Install updates from vendor's website.

libx11 - update to 1.6.0
IBM BladeCenter Advanced Management Module - update to BPET68C-3.68C

External References

Related Security Bulletins