Bug 959112 – CVE-2013-2004 libX11: unbounded recursion leading to stack-overflow

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 959112 - (CVE-2013-2004) CVE-2013-2004 libX11: unbounded recursion leading to stack-overflow

Summary:	CVE-2013-2004 libX11: unbounded recursion leading to stack-overflow

Status:	CLOSED ERRATA

Aliases:	CVE-2013-2004

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	low Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=low,public=20130523,reported=2...
Keywords:	Reopened, Security

Depends On:	966680 1078019
Blocks:	959130 1101912
	Show dependency tree / graph

Reported:	2013-05-03 03:46 EDT by Huzaifa S. Sidhpurwala
Modified:	2014-10-17 03:45 EDT (History)
CC List:	5 users (show)

See Also:
Fixed In Version:	libX11 1.5.99.902 (1.6 RC2)
Doc Type:	Bug Fix
Doc Text:	Two stack-based buffer overflow flaws were found in the way libX11, the Core X11 protocol client library, processed certain user-specified files. A malicious X11 server could possibly use this flaw to crash an X11 client via a specially crafted file.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2014-10-16 02:17:19 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2014:1436	normal	SHIPPED_LIVE	Moderate: X11 client libraries security, bug fix, and enhancement update	2014-10-13 21:06:02 EDT

Groups: None (edit)

Description Huzaifa S. Sidhpurwala 2013-05-03 03:46:25 EDT

IssueDescription:

Two stack-based buffer overflow flaws were found in the way libX11, the Core X11 protocol client library, processed certain user-specified files. A malicious X11 server could possibly use this flaw to crash an X11 client via a specially crafted file.

Comment 3 Jan Lieskovsky 2013-05-23 12:10:23 EDT

Public via:
  http://www.openwall.com/lists/oss-security/2013/05/23/3

Comment 4 Jan Lieskovsky 2013-05-23 12:34:45 EDT

Upstream patches:
  http://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=236b603d235dc264d1c6250dca09c745458a9088 [1/2]
  http://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=226622349a4b1e16064649d4444a34fb4be4f464 [2/2]

Comment 5 Jan Lieskovsky 2013-05-23 12:37:12 EDT

This issue affects the versions of the libX11 package, as shipped with Fedora release of 17 and 18. Please schedule an update.

Comment 6 Jan Lieskovsky 2013-05-23 12:39:16 EDT

Created libX11 tracking bugs for this issue

Affects: fedora-all [bug 966680]

Comment 7 Jan Lieskovsky 2013-05-23 13:02:29 EDT

External References:

http://www.x.org/wiki/Development/Security/Advisory-2013-05-23

Comment 8 Peter Hutterer 2013-05-27 23:02:47 EDT

All packages in stable, closing.

Comment 10 Huzaifa S. Sidhpurwala 2013-06-04 23:36:41 EDT

This issue affects the version of libX11 as shipped with Red Hat Enterprise Linux 5 and 6.

Comment 11 Huzaifa S. Sidhpurwala 2013-06-04 23:48:29 EDT

Statement:

This issue affects the libX11 package in Red Hat Enterprise Linux 5. Red Hat Product Security has rated this issue as having Low security impact. This issue is not planned to be fixed in Red Hat Enterprise Linux 5 as it is now in Production 3 Phase of the support and maintenance life cycle: https://access.redhat.com/support/policy/updates/errata/

Comment 13 errata-xmlrpc 2014-10-14 01:05:27 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6

Via RHSA-2014:1436 https://rhn.redhat.com/errata/RHSA-2014-1436.html

Note You need to log in before you can comment on or make changes to this bug.