{"id":"CVE-2013-2190","aliases":["DEBIAN-CVE-2013-2190","EUVD-2013-2147","GHSA-m6j8-h7w8-9hwm","MGASA-2013-0312","UBUNTU-CVE-2013-2190"],"status":"published","title":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when...","description":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has \"disappeared,\" which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00533,"percentile":0.45292,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2013-10-17T19:55:32Z","modified":"2026-09-01T20:03:16Z","fixes":[{"ecosystem":"Debian:12","package":"clutter-1.0","fixed_in":["1.14.4-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"clutter-1.0","fixed_in":["1.14.4-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"clutter-1.0","fixed_in":["1.14.4-3"],"sources":["osv"]},{"ecosystem":"Mageia:2","package":"clutter","fixed_in":["1.10.8-1.1.mga2"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"clutter","fixed_in":["1.12.2-2.1.mga3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"clutter-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"clutter-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"clutter-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-3"}]}]},{"source":"osv","ecosystem":"Mageia:2","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.8-1.1.mga2"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-2.1.mga3"}]}]}],"products":[{"vendor":"clutter_project","product":"clutter"},{"vendor":"opensuse","product":"opensuse"}],"references":[{"url":"https://git.gnome.org/browse/clutter/commit/?h=clutter-1.14\u0026id=e310c68d7b38d521e341f4e8a36f54303079d74e","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","evidence","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2013/06/19/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=980111","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=701974","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-10/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://git.gnome.org/browse/clutter/commit/?h=clutter-1.16\u0026id=d343cc6289583a7b0d929b82b740499ed588b1ab","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2190"},{"url":"https://github.com/advisories/GHSA-m6j8-h7w8-9hwm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-2190","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0312.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-2190","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2013/06/18","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2190","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-2190","description":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has \"disappeared,\" which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.","status":"published","published":"2013-10-17T23:00:00Z","modified":"2024-08-06T15:27:41.141Z","updated_at":"2026-11-02T14:34:55.825574Z"}],"euvd":[{"id":"EUVD-2013-2147","description":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has \"disappeared,\" which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.","status":"published","published":"2013-10-17T23:00:00Z","modified":"2024-08-06T15:27:41Z","updated_at":"2026-11-03T01:56:39.164386Z"}],"ghsa":[{"id":"GHSA-m6j8-h7w8-9hwm","title":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when...","description":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has \"disappeared,\" which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.","status":"published","published":"2022-05-14T02:10:10Z","modified":"2023-02-02T05:05:16Z","updated_at":"2026-11-02T14:52:03.631935Z"}],"nvd":[{"id":"CVE-2013-2190","description":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has \"disappeared,\" which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.","status":"published","published":"2013-10-17T23:55:04.207Z","modified":"2026-06-16T23:52:54.857Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"CVE-2013-2190","description":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has \"disappeared,\" which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.","status":"published","published":"2013-10-17T23:55:04Z","modified":"2026-04-16T06:23:14.506099568Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-2190","description":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has \"disappeared,\" which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.","status":"published","published":"2013-10-17T23:55:04.207Z","modified":"2026-09-01T20:03:16.102234728Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"MGASA-2013-0312","title":"Updated clutter packages fix CVE-2013-2190","description":"Updated clutter packages fix security vulnerability:\n\nA security flaw was found in the way Clutter, an open source software library\nfor creating rich graphical user interfaces, used to manage translation of\nhierarchy events in certain circumstances (when underlying device disappeared,\ncausing XIQueryDevice query to throw an error). Physically proximate attackers\ncould use this flaw for example to obtain unauthorized access to gnome-shell\nsession right after system resume (due to gnome-shell crash) (CVE-2013-2190).\n","status":"published","published":"2013-10-17T19:55:32Z","modified":"2026-04-16T06:25:17.069166213Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"UBUNTU-CVE-2013-2190","description":"The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has \"disappeared,\" which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.","status":"withdrawn","published":"2013-10-17T23:55:00Z","modified":"2025-07-16T07:31:15.132503Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}