{"id":"CVE-2013-1996","aliases":["DEBIAN-CVE-2013-1996","DSA-2687-1","EUVD-2013-1984","GHSA-hv42-mwv8-2fw6","MGASA-2013-0186","SUSE-SU-2015:0674-1","openSUSE-SU-2024:10068-1"],"status":"published","title":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a...","description":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01262,"percentile":0.69855,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2013-05-23T00:00:00Z","modified":"2026-09-01T20:03:15Z","fixes":[{"ecosystem":"Debian:12","package":"libfs","fixed_in":["2:1.0.4-1+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libfs","fixed_in":["2:1.0.4-1+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libfs","fixed_in":["2:1.0.4-1+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libfs","fixed_in":["2:1.0.2-1+squeeze1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libfs","fixed_in":["2:1.0.4-1+deb7u1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libFS","fixed_in":["1.0.7-1.8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.4-1+deb7u1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.4-1+deb7u1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.4-1+deb7u1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"libfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.2-1+squeeze1"}]}],"versions":["2:1.0.2-1"]},{"source":"osv","ecosystem":"Debian:7","package":"libfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.4-1+deb7u1"}]}],"versions":["2:1.0.4-1"]},{"source":"osv","ecosystem":"Mageia:3","package":"libdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxcb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxcursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.14-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2.901-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxinerama","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxrandr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxres","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxvmc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxxf86dga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"libxxf86vm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.3-1.1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"x11-driver-video-openchrome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.3-1.mga3"}]}],"bundled":30},{"source":"osv","ecosystem":"Mageia:3","package":"mesa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.3-1.1.mga3.tainted"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libFS","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1.8"}]}]}],"products":[{"vendor":"x","product":"libfs"}],"references":[{"url":"http://www.debian.org/security/2013/dsa-2687","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"http://www.ubuntu.com/usn/USN-1853-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/05/23/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/60130","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.x.org/wiki/Development/Security/Advisory-2013-05-23","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1996"},{"url":"https://github.com/advisories/GHSA-hv42-mwv8-2fw6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1996","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0186.html","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-0897.html","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2673","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2674","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2675","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2676","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2677","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2678","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2679","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2680","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2681","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2682","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2683","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2684","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2685","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2686","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2688","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2689","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2690","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2691","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2692","tags":["web"]},{"url":"http://www.debian.org/security/2013/dsa-2693","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10565","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150674-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/815451","tags":["report"]},{"url":"https://bugzilla.suse.com/821663","tags":["report"]},{"url":"https://bugzilla.suse.com/854915","tags":["report"]},{"url":"https://bugzilla.suse.com/857544","tags":["report"]},{"url":"https://bugzilla.suse.com/921978","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1804","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-1996","description":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.","status":"published","published":"2013-06-15T20:00:00Z","modified":"2024-08-06T15:20:37.363Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1984","description":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.","status":"published","published":"2013-06-15T20:00:00Z","modified":"2024-08-06T15:20:37Z","updated_at":"2026-11-03T01:56:40.030926Z"}],"ghsa":[{"id":"GHSA-hv42-mwv8-2fw6","title":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a...","description":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.","status":"published","published":"2022-05-17T04:04:44Z","modified":"2023-01-28T05:01:03Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:28.398824Z"}],"nvd":[{"id":"CVE-2013-1996","description":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.","status":"published","published":"2013-06-15T20:55:00.84Z","modified":"2026-06-16T23:52:32.483Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:29.210317Z"}],"osv":[{"id":"CVE-2013-1996","description":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.","status":"published","published":"2013-06-15T20:55:00Z","modified":"2026-04-16T04:37:06.00459124Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-1996","description":"X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.","status":"published","published":"2013-06-15T20:55:00.84Z","modified":"2026-09-01T20:03:15.704482918Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"DSA-2687-1","title":"libfs - several","status":"published","published":"2013-05-23T00:00:00Z","modified":"2026-03-09T01:19:23.683671Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0186","title":"Updated X.org packages fix multiple security vulnerabilities","description":"Ilja van Sprundel of IOActive discovered several security issues in multiple\ncomponents of the X.org graphics stack and the related libraries: Various\ninteger overflows, sign handling errors in integer conversions, buffer\noverflows, memory corruption and missing input sanitising may lead to\nprivilege escalation or denial of service (CVE-2013-1981, CVE-2013-1982,\nCVE-2013-1983, CVE-2013-1984, CVE-2013-1985, CVE-2013-1986, CVE-2013-1987,\nCVE-2013-1988, CVE-2013-1989, CVE-2013-1990, CVE-2013-1991, CVE-2013-1992,\nCVE-2013-1993, CVE-2013-1994, CVE-2013-1995, CVE-2013-1996, CVE-2013-1997,\nCVE-2013-1998, CVE-2013-1999, CVE-2013-2000, CVE-2013-2001, CVE-2013-2002,\nCVE-2013-2003, CVE-2013-2004, CVE-2013-2005, CVE-2013-2062, CVE-2013-2063,\nCVE-2013-2064, CVE-2013-2066).\n\nAn out-of-bounds access flaw was found in Mesa. If an application using\nMesa exposed the Mesa API to untrusted inputs (Mozilla Firefox does\nthis), an attacker could cause the application to crash or, potentially,\nexecute arbitrary code with the privileges of the user running the\napplication (CVE-2013-1872).\n","status":"published","published":"2013-06-26T18:17:24Z","modified":"2026-04-16T04:43:59.459146504Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10068-1","title":"libFS-devel-1.0.7-1.8 on GA media","description":"These are all security issues fixed in the libFS-devel-1.0.7-1.8 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:51.258283Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:0674-1","title":"Security update for xorg-x11-libs","description":"\nxorg-x11-libs was patched to fix the following security issues:\n\n    * Integer overflow of allocations in font metadata file parsing.\n      (CVE-2014-0209)\n    * libxfont not validating length fields when parsing xfs protocol\n      replies. (CVE-2014-0210)\n    * Integer overflows causing miscalculating memory needs for xfs\n      replies. (CVE-2014-0211)\n\nFurther information is available at \nhttp://lists.x.org/archives/xorg-announce/2014-May/002431.html\n\u003chttp://lists.x.org/archives/xorg-announce/2014-May/002431.html\u003e .\n\nSecurity Issues references:\n\n    * CVE-2014-0209\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0209\u003e\n    * CVE-2014-0210\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0210\u003e\n    * CVE-2014-0211\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0211\u003e\n\n","status":"published","published":"2014-05-15T16:30:57Z","modified":"2026-02-04T03:44:30.540444Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}