CVE-2013-6424

Published: Jan 18, 2014Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Affected (9)

Products: Pixman: Pixman · Debian: Debian Linux · Opensuse: Opensuse · +1 more

Show all products

Pixman: Pixman · Debian: Debian Linux · Opensuse: Opensuse · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pixman Pixman	Before 0.31.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10

Related CWEs

CWE-191

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (22)

http://lists.opensuse.org/opensuse-updates/2013-12/msg00127.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.x.org/archives/xorg-devel/2013-October/037996.html

Source: secalert@redhat.com

Patch

http://rhn.redhat.com/errata/RHSA-2013-1868.html

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2013/dsa-2822

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2013/12/03/8

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2013/12/04/8

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.ubuntu.com/usn/USN-2500-1

Source: secalert@redhat.com

Third Party Advisory

https://bugs.freedesktop.org/show_bug.cgi?id=67484

Source: secalert@redhat.com

Issue TrackingPatchVendor Advisory

https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://security.gentoo.org/glsa/201701-64

Source: secalert@redhat.com

Third Party Advisory

https://security.gentoo.org/glsa/201710-30

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-12/msg00127.html