Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

X11 libX11 buffer overflow can be triggered remotely

CVE-2013-7439 · published 11 years ago
Summary

The X11 graphics library (libX11) in certain Linux distributions can overflow memory when it receives a specially crafted request. This could let an attacker cause the program to behave unexpectedly or potentially take control. Update libX11 to the latest version or apply your operating system’s security patches to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
x.org libx11 1.0.1
1.0.2
1.0.3
1.1
1.1.4
1.1.5
1.1.6
1.1.99.1
1.1.99.2
1.2
1.2.1
1.2.2
20 more version ranges
cpe:2.3:a:x.org:libx11:1.0.1:*:*:*:*:*:*:*
canonical ubuntu_linux 12.04
14.04
14.10
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
debian debian_linux 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
x.org x11 6.0
6.1
6.3
6.4
6.5.1
6.6
6.7
6.8.0
6.8.1
6.8.2
6.9
cpe:2.3:a:x.org:x11:6.0:*:*:*:*:*:*:*
Original advisory text
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted...
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
4% chance of attack within 30 days
Type
CWE-189Numeric Errors
Timeline
Published16 Apr 2015
Updated25 Oct 2026
First seen29 Sep 2026
Sources
CVE-2013-7439 · NVD
Track software like this
Free during beta