CVE-2013-1993
Mesa: Multiple integer overflows leading to heap-based bufer overflows
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.
Múltiples desbordamientos de enteros en X.org libglx en Mesa v9.1.1 y anteriores permiten que los servidores X provoquen una asignación de memoria insuficiente y un desbordamiento de búfer a través de vectores relacionados con las funciones (1) XF86DRIOpenConnection y (2) XF86DRIGetClientDriverName.
Mesa provides a 3D graphics API that is compatible with Open Graphics Library. It also provides hardware-accelerated drivers for many popular graphics chips. An out-of-bounds access flaw was found in Mesa. If an application using Mesa exposed the Mesa API to untrusted inputs, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. It was found that Mesa did not correctly validate messages from the X server. A malicious X server could cause an application using Mesa to crash or, potentially, execute arbitrary code with the privileges of the user running the application.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2013-02-19 CVE Reserved
- 2013-05-23 CVE Published
- 2024-08-06 CVE Updated
- 2025-06-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-122: Heap-based Buffer Overflow
- CWE-189: Numeric Errors
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://advisories.mageia.org/MGASA-2013-0190.html | X_refsource_confirm | |
| http://lists.freedesktop.org/archives/mesa-dev/2013-May/039720.html | Mailing List | |
| http://lists.freedesktop.org/archives/mesa-dev/2013-May/039722.html | Mailing List | |
| http://www.openwall.com/lists/oss-security/2013/05/23/3 | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2013-06/msg00007.html | 2023-02-13 | |
| http://rhn.redhat.com/errata/RHSA-2013-0897.html | 2023-02-13 | |
| http://rhn.redhat.com/errata/RHSA-2013-0898.html | 2023-02-13 | |
| http://www.debian.org/security/2013/dsa-2678 | 2023-02-13 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2013:181 | 2023-02-13 | |
| http://www.ubuntu.com/usn/USN-1888-1 | 2023-02-13 | |
| http://www.x.org/wiki/Development/Security/Advisory-2013-05-23 | 2023-02-13 | |
| https://access.redhat.com/security/cve/CVE-2013-1993 | 2013-06-03 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=961613 | 2013-06-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mesa3d Search vendor "Mesa3d" | Mesa Search vendor "Mesa3d" for product "Mesa" | <= 9.1.1 Search vendor "Mesa3d" for product "Mesa" and version " <= 9.1.1" | - |
Affected
| ||||||
| Mesa3d Search vendor "Mesa3d" | Mesa Search vendor "Mesa3d" for product "Mesa" | 9.0 Search vendor "Mesa3d" for product "Mesa" and version "9.0" | - |
Affected
| ||||||
| Mesa3d Search vendor "Mesa3d" | Mesa Search vendor "Mesa3d" for product "Mesa" | 9.0.1 Search vendor "Mesa3d" for product "Mesa" and version "9.0.1" | - |
Affected
| ||||||
| Mesa3d Search vendor "Mesa3d" | Mesa Search vendor "Mesa3d" for product "Mesa" | 9.0.2 Search vendor "Mesa3d" for product "Mesa" and version "9.0.2" | - |
Affected
| ||||||
| Mesa3d Search vendor "Mesa3d" | Mesa Search vendor "Mesa3d" for product "Mesa" | 9.0.3 Search vendor "Mesa3d" for product "Mesa" and version "9.0.3" | - |
Affected
| ||||||
| Mesa3d Search vendor "Mesa3d" | Mesa Search vendor "Mesa3d" for product "Mesa" | 9.1 Search vendor "Mesa3d" for product "Mesa" and version "9.1" | - |
Affected
| ||||||
| X Search vendor "X" | Libglx Search vendor "X" for product "Libglx" | - | - |
Affected
| ||||||