CVE-2013-1982

Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.

References

Affected packages

Debian:11 / libxext

Package

Name: libxext
Purl: pkg:deb/debian/libxext?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:1.3.1-2+deb7u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libxext

Package

Name: libxext
Purl: pkg:deb/debian/libxext?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:1.3.1-2+deb7u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libxext

Package

Name: libxext
Purl: pkg:deb/debian/libxext?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:1.3.1-2+deb7u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / libxext

Package

Name: libxext
Purl: pkg:deb/debian/libxext?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:1.3.1-2+deb7u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}