CVE-2013-2064

Published: Jun 15, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.

Affected (24)

Products: Debian: Debian Linux · Oracle: Secure Global Desktop · Canonical: Ubuntu Linux · +3 more

Show all products

Debian: Debian Linux · Oracle: Secure Global Desktop · Canonical: Ubuntu Linux · Opensuse: Opensuse · Fedoraproject: Fedora · X: Libxcb

Debian

1 product

Debian Linux

Oracle

1 product

Secure Global Desktop

1 product

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Secure Global Desktop	Version 4.71
Oracle Secure Global Desktop	Version 5.2

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 13.04

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 19

Configuration F

13 vulnerable

Vulnerable Software	Affected Versions
X Libxcb	Up to 1.9
X Libxcb	Version 1.1.90.1
X Libxcb	Version 1.1.91
X Libxcb	Version 1.1.92
X Libxcb	Version 1.1.93
X Libxcb	Version 1.2
X Libxcb	Version 1.3
X Libxcb	Version 1.4
X Libxcb	Version 1.5
X Libxcb	Version 1.6
X Libxcb	Version 1.7
X Libxcb	Version 1.8.1
X Libxcb	Version 1.8