Description
X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.
References (7)
Core 7
Core References
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1859-1
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/05/23/3
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/60124
Vendor Advisory x_refsource_confirm
http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2013/dsa-2683
Scores
EPSS
0.0188
EPSS Percentile
76.9%
Details
CWE
CWE-119
Status
published
Products (9)
x.org/libxi
1.5.0
x.org/libxi
1.5.99.2
x.org/libxi
1.5.99.3
x.org/libxi
1.6.0
x.org/libxi
1.6.1
x.org/libxi
1.6.2
x.org/libxi
1.6.99.1
x.org/libxi
1.7
x.org/libxi
< 1.7.1
Published
Jun 15, 2013
Tracked Since
Feb 18, 2026