Every CVE Search/ Get API key

CVE-2013-1940

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input...

2.1 LowFix available

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

Exploit likelihood

0.38%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

Record
CVE-2013-1940
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

Record
CVE-2013-1940
Updated
2026-11-02
EUVDEUVD-2013-1932 No score

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

Record
EUVD-2013-1932
Updated
2026-11-03
GitHub AdvisoriesGHSA-hmm5-mg2w-wrfw No score

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input...

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

Record
GHSA-hmm5-mg2w-wrfw
Updated
2026-11-02
OSV No score

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

Record
CVE-2013-1940
Updated
2026-11-02
OSVDEBIAN-CVE-2013-1940 No score

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

Record
DEBIAN-CVE-2013-1940
Updated
2026-11-02
OSVopenSUSE-SU-2024:10518-1 No score

xorg-x11-server-7.6_1.18.4-2.1 on GA media

These are all security issues fixed in the xorg-x11-server-7.6_1.18.4-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10518-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xorg-server
Debian:12
 before 2:1.12.4-6
2:1.12.4-6
xorg-server
Debian:13
 before 2:1.12.4-6
2:1.12.4-6
xorg-server
Debian:14
 before 2:1.12.4-6
2:1.12.4-6
xorg-server
Debian:6.0
 before 2:1.7.7-16, plus listed versions
2:1.7.7-112:1.7.7-122:1.7.7-132:1.7.7-142:1.7.7-15
2:1.7.7-16
xorg-x11-server
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xnest
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-devel
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
Show 34 moreShow less
Affected packages
PackageAffectedFixed
xorg-x11-server-source
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xorg
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-common
Red Hat:enterprise_linux:6::client
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xnest
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xorg
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-common
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-source
Red Hat:enterprise_linux:6::computenode
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xnest
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-devel
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-source
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xorg
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-common
Red Hat:enterprise_linux:6::server
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xdmx
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xnest
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xvfb
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-source
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xephyr
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-Xorg
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6
xorg-x11-server-common
Red Hat:enterprise_linux:6::workstation
 before 0:1.13.0-23.el6
0:1.13.0-23.el6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1940 is a low vulnerability (CVSS 2.1) in Canonical Ubuntu Linux, published April 17, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in xorg-server 2:1.12.4-6.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open