CVE-2013-2001

Published: 23 May 2013

Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function.

Priority

Status

Package	Release	Status
libxxf86vm Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Released (1:1.1.1-2ubuntu0.1)
	quantal	Released (1:1.1.2-1ubuntu0.12.10.1)
	raring	Released (1:1.1.2-1ubuntu0.13.04.1)
	upstream	Pending (1.1.3)
	Patches: upstream: http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=ef95f1c3737d9efc7d97fb1784f80ef3540a846b upstream: http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=a89b1ad3377bfef9bab52f15f98b00f6540d531a upstream: http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=8ed00bd0a7c44c7fece687e2566d920ea74ef809 upstream: http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=6c82906f25abcb0f8ec92bcdaf1872bd8b63ca5d upstream: http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=d0355b28dd53fba6fb29c350e090ed4a73d4c480 upstream: http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=284a88e21fc05a63466115b33efa411c60d988c9 upstream: http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=47bb28ac0e6e49d3b6eb90c7c215f2fcf54f1a95 upstream: http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=4c4123441e40da97acd10f58911193ad3dcef5cd

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

CVE-2013-2001

Priority

Status

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading