{"id":"CVE-2013-4396","aliases":["DEBIAN-CVE-2013-4396","DSA-2784-1","EUVD-2013-4275","GHSA-qw42-qhpr-5gg9","MGASA-2013-0317","RHSA-2013:1426","SUSE-SU-2015:0427-1","SUSE-SU-2015:1025-1","openSUSE-SU-2024:10518-1"],"status":"published","title":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server...","description":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04077,"percentile":0.90774,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2013-10-10T10:00:00Z","modified":"2026-09-01T20:01:59Z","fixes":[{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:1.14.3-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:1.14.3-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:1.14.3-4"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"xorg-server","fixed_in":["2:1.7.7-17"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"xorg-server","fixed_in":["2:1.12.4-6+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:2","package":"x11-server","fixed_in":["1.11.4-2.4.mga2"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"x11-server","fixed_in":["1.13.4-2.2.mga3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xnest","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xorg","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvnc-source","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-sdk","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xnest","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xorg","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvnc-source","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-sdk","fixed_in":["0:1.1.1-48.101.el5_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","fixed_in":["0:1.13.0-11.1.el6_4.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-4"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.7-17"}]}],"versions":["2:1.7.7-11","2:1.7.7-12","2:1.7.7-13","2:1.7.7-14","2:1.7.7-15","2:1.7.7-16"]},{"source":"osv","ecosystem":"Debian:7","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.4-6+deb7u1"}]}],"versions":["2:1.12.4-6"]},{"source":"osv","ecosystem":"Mageia:2","package":"x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.4-2.4.mga2"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.4-2.2.mga3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvnc-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvnc-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-11.1.el6_4.2"}]}]}],"products":[{"vendor":"x","product":"x.org_x11"}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2013-10/msg00056.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1426.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-10/msg00060.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.debian.org/security/2013/dsa-2784","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1990-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/62892","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://openwall.com/lists/oss-security/2013/10/08/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1014561","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix","report"]},{"url":"http://lists.x.org/archives/xorg-announce/2013-October/002332.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4396","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qw42-qhpr-5gg9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-4396","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0317.html","tags":["advisory"]},{"url":"http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4396","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1426.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11428","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1426","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1426.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4396","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4396","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150427-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/816813","tags":["report"]},{"url":"https://bugzilla.suse.com/843652","tags":["report"]},{"url":"https://bugzilla.suse.com/853846","tags":["report"]},{"url":"https://bugzilla.suse.com/864911","tags":["report"]},{"url":"https://bugzilla.suse.com/874903","tags":["report"]},{"url":"https://bugzilla.suse.com/878433","tags":["report"]},{"url":"https://bugzilla.suse.com/878446","tags":["report"]},{"url":"https://bugzilla.suse.com/879019","tags":["report"]},{"url":"https://bugzilla.suse.com/880745","tags":["report"]},{"url":"https://bugzilla.suse.com/880835","tags":["report"]},{"url":"https://bugzilla.suse.com/883051","tags":["report"]},{"url":"https://bugzilla.suse.com/883516","tags":["report"]},{"url":"https://bugzilla.suse.com/883598","tags":["report"]},{"url":"https://bugzilla.suse.com/886213","tags":["report"]},{"url":"https://bugzilla.suse.com/907268","tags":["report"]},{"url":"https://bugzilla.suse.com/907633","tags":["report"]},{"url":"https://bugzilla.suse.com/915810","tags":["report"]},{"url":"https://bugzilla.suse.com/928520","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3418","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151025-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3164","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-4396","description":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.","status":"published","published":"2013-10-10T10:00:00Z","modified":"2024-08-06T16:45:12.73Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-4275","description":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.","status":"published","published":"2013-10-10T10:00:00Z","modified":"2024-08-06T16:45:12Z","updated_at":"2026-11-03T01:56:32.187151Z"}],"ghsa":[{"id":"GHSA-qw42-qhpr-5gg9","title":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server...","description":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.","status":"published","published":"2022-05-17T03:46:28Z","modified":"2023-01-27T05:09:10Z","updated_at":"2026-11-02T14:43:21.634382Z"}],"nvd":[{"id":"CVE-2013-4396","description":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.","status":"published","published":"2013-10-10T10:55:06.473Z","modified":"2026-06-16T23:57:09.433Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:38.715467Z"}],"osv":[{"id":"CVE-2013-4396","description":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.","status":"published","published":"2013-10-10T10:55:06Z","modified":"2026-04-16T06:16:58.54515394Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-4396","description":"Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.","status":"published","published":"2013-10-10T10:55:06.473Z","modified":"2026-09-01T20:01:59.636056351Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"DSA-2784-1","title":"xorg-server - use-after-free","status":"published","published":"2013-10-22T00:00:00Z","modified":"2026-03-09T01:21:50.21694Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0317","title":"Updated x11-server packages fix CVE-2013-4396","description":"Updated x11-server packages fix security vulnerability:\n\nUse-after-free vulnerability in the doImageText function in dix/dixfonts.c in\nthe xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated\nusers to cause a denial of service (daemon crash) or possibly execute arbitrary\ncode via a crafted ImageText request that triggers memory-allocation failure\n(CVE-2013-4396).\n","status":"published","published":"2013-10-25T21:07:07Z","modified":"2026-04-16T06:24:27.0564952Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10518-1","title":"xorg-x11-server-7.6_1.18.4-2.1 on GA media","description":"These are all security issues fixed in the xorg-x11-server-7.6_1.18.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:35:00.091067Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2013:1426","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-15T21:10:35Z","modified":"2026-06-26T12:20:54.282675895Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"SUSE-SU-2015:0427-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:12:31.989382Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1025-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:55:40.562616Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}