{"id":"CVE-2013-1993","aliases":["DEBIAN-CVE-2013-1993","DSA-2678-1","EUVD-2013-1981","GHSA-4j5x-8p5g-fw48","MGASA-2013-0186","MGASA-2013-0190","RHSA-2013:0897","RHSA-2013:0898"],"status":"published","title":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger...","description":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02687,"percentile":0.85964,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2013-05-23T00:00:00Z","modified":"2026-09-01T20:03:15Z","fixes":[{"ecosystem":"Debian:12","package":"mesa","fixed_in":["8.0.5-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mesa","fixed_in":["8.0.5-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mesa","fixed_in":["8.0.5-6"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"mesa","fixed_in":["7.7.1-6"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"mesa","fixed_in":["8.0.5-4+deb7u1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glx-utils","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-debuginfo","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGL","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGL-devel","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGLU","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGLU-devel","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGLw","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGLw-devel","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libOSMesa","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libOSMesa-devel","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-source","fixed_in":["0:6.5.1-7.11.el5_9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-6"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-6"}]}],"versions":["7.7.1-4","7.7.1-5"]},{"source":"osv","ecosystem":"Debian:7","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-4+deb7u1"}]}],"versions":["8.0.5-4"]},{"source":"osv","ecosystem":"Mageia:3","package":"libdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxcb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxcursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.14-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2.901-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxinerama","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxrandr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxres","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxvmc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxxf86dga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxxf86vm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.3-1.1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"x11-driver-video-openchrome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.3-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.3-1.1.mga3.tainted"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:2","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-1.1.mga2"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:2","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-1.1.mga2.tainted"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-dri-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-dri-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-libGL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-libGLU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-libGL-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-libGLU-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-libOSMesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mesa-libOSMesa-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-dri-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-dri-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-libGL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-libGLU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-libGL-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-libGLU-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-libOSMesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mesa-libOSMesa-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-dri-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-dri-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-libGL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-libGL-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-libGLU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-libGLU-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-libOSMesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mesa-libOSMesa-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-dri-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-dri-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-libGL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-libGL-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-libGLU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-libGLU-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-libOSMesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mesa-libOSMesa-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0-0.8.el6_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGL-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGLU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGLU-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGLw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libGLw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libOSMesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-libOSMesa-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mesa-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.1-7.11.el5_9"}]}]}],"products":[{"vendor":"mesa3d","product":"mesa"},{"vendor":"x","product":"libglx"}],"references":[{"url":"http://lists.freedesktop.org/archives/mesa-dev/2013-May/039720.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://advisories.mageia.org/MGASA-2013-0190.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2678","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-1888-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:181","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0898.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0897.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.freedesktop.org/archives/mesa-dev/2013-May/039722.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2013/05/23/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2013-05-23","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1993","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0897","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0898","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=961613","tags":["report"]},{"url":"https://github.com/advisories/GHSA-4j5x-8p5g-fw48"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1993","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0186.html","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-0897.html","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2673","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2674","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2675","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2676","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2677","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2679","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2680","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2681","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2682","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2683","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2684","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2685","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2686","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2687","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2688","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2689","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2690","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2691","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2692","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2693","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10565","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2013-0190.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10569","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=923584","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0897.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1872","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1872","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1872","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1993","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0898.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-1993","description":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.","status":"published","published":"2013-06-15T19:00:00Z","modified":"2024-08-06T15:20:37.433Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1981","description":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.","status":"published","published":"2013-06-15T19:00:00Z","modified":"2024-08-06T15:20:37Z","updated_at":"2026-11-03T01:56:40.030926Z"}],"ghsa":[{"id":"GHSA-4j5x-8p5g-fw48","title":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger...","description":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.","status":"published","published":"2022-05-17T04:54:16Z","modified":"2023-02-02T18:30:24Z","updated_at":"2026-11-02T14:52:46.933473Z"}],"nvd":[{"id":"CVE-2013-1993","description":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.","status":"published","published":"2013-06-15T19:55:01.157Z","modified":"2026-06-16T23:52:32.15Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:29.210317Z"}],"osv":[{"id":"CVE-2013-1993","description":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.","status":"published","published":"2013-06-15T19:55:01Z","modified":"2026-04-16T04:43:51.446889299Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-1993","description":"Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.","status":"published","published":"2013-06-15T19:55:01.157Z","modified":"2026-09-01T20:03:15.266030604Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"DSA-2678-1","title":"mesa - several","status":"published","published":"2013-05-23T00:00:00Z","modified":"2026-03-09T01:18:34.900351Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0186","title":"Updated X.org packages fix multiple security vulnerabilities","description":"Ilja van Sprundel of IOActive discovered several security issues in multiple\ncomponents of the X.org graphics stack and the related libraries: Various\ninteger overflows, sign handling errors in integer conversions, buffer\noverflows, memory corruption and missing input sanitising may lead to\nprivilege escalation or denial of service (CVE-2013-1981, CVE-2013-1982,\nCVE-2013-1983, CVE-2013-1984, CVE-2013-1985, CVE-2013-1986, CVE-2013-1987,\nCVE-2013-1988, CVE-2013-1989, CVE-2013-1990, CVE-2013-1991, CVE-2013-1992,\nCVE-2013-1993, CVE-2013-1994, CVE-2013-1995, CVE-2013-1996, CVE-2013-1997,\nCVE-2013-1998, CVE-2013-1999, CVE-2013-2000, CVE-2013-2001, CVE-2013-2002,\nCVE-2013-2003, CVE-2013-2004, CVE-2013-2005, CVE-2013-2062, CVE-2013-2063,\nCVE-2013-2064, CVE-2013-2066).\n\nAn out-of-bounds access flaw was found in Mesa. If an application using\nMesa exposed the Mesa API to untrusted inputs (Mozilla Firefox does\nthis), an attacker could cause the application to crash or, potentially,\nexecute arbitrary code with the privileges of the user running the\napplication (CVE-2013-1872).\n","status":"published","published":"2013-06-26T18:17:24Z","modified":"2026-04-16T04:43:59.459146504Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2013-0190","title":"Updated mesa packages fix multiple vulnerabilties","description":"An out-of-bounds access flaw was found in Mesa. If an application using\nMesa exposed the Mesa API to untrusted inputs (Mozilla Firefox does\nthis), an attacker could cause the application to crash or, potentially,\nexecute arbitrary code with the privileges of the user running the\napplication (CVE-2013-1872).\n\nIt was found that Mesa did not correctly validate messages from the X\nserver. A malicious X server could cause an application using Mesa to\ncrash or, potentially, execute arbitrary code with the privileges of the\nuser running the application (CVE-2013-1993).\n","status":"published","published":"2013-06-26T19:04:19Z","modified":"2026-04-16T04:43:50.966573081Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2013:0897","title":"Red Hat Security Advisory: mesa security update","status":"published","published":"2024-09-15T20:53:25Z","modified":"2026-06-28T10:08:12Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:0898","title":"Red Hat Security Advisory: mesa security update","status":"published","published":"2024-09-15T20:53:30Z","modified":"2026-06-28T10:08:13Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}