{"id":"CVE-2013-6424","aliases":["DEBIAN-CVE-2013-6424","DSA-2822-1","EUVD-2013-6236","GHSA-vp3j-rhgw-hr9f","MGASA-2014-0016","RHSA-2013:1868","SUSE-SU-2015:0427-1","SUSE-SU-2015:1025-1","UBUNTU-CVE-2013-6424","USN-2500-1","openSUSE-SU-2024:10518-1"],"status":"published","title":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context...","description":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02879,"percentile":0.86945,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-191"],"published":"2013-12-18T00:00:00Z","modified":"2026-09-01T20:03:19Z","fixes":[{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:1.14.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:1.14.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:1.14.2.901-1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"xorg-server","fixed_in":["2:1.7.7-18"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"xorg-server","fixed_in":["2:1.12.4-6+deb7u2"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"x11-server","fixed_in":["1.13.4-2.3.mga3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xnest","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xorg","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvnc-source","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-sdk","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xnest","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xorg","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvnc-source","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-sdk","fixed_in":["0:1.1.1-48.101.el5_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","fixed_in":["0:1.13.0-23.1.el6_5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.2.901-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.7-18"}]}],"versions":["2:1.7.7-11","2:1.7.7-12","2:1.7.7-13","2:1.7.7-14","2:1.7.7-15","2:1.7.7-16","2:1.7.7-17"]},{"source":"osv","ecosystem":"Debian:7","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.4-6+deb7u2"}]}],"versions":["2:1.12.4-6","2:1.12.4-6+deb7u1"]},{"source":"osv","ecosystem":"Mageia:3","package":"x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.4-2.3.mga3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-Xvnc-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xorg-x11-server-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-Xvnc-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xorg-x11-server-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-48.101.el5_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-23.1.el6_5"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.15.1-0ubuntu2.7"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1","2:1.15.1-0ubuntu2.4","2:1.15.1-0ubuntu2.5","2:1.15.1-0ubuntu2.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xorg-server-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.0-1ubuntu1.2~trusty2"}]}],"versions":["2:1.16.0-1ubuntu1.2~trusty1"],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"pixman","product":"pixman"}],"references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://lists.x.org/archives/xorg-devel/2013-October/037996.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix"]},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=67484","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2013/12/04/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://security.gentoo.org/glsa/201701-64","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2822","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.ubuntu.com/usn/USN-2500-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201710-30","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1868.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/12/03/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article","report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00127.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6424","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1868","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1037984","tags":["report"]},{"url":"https://github.com/advisories/GHSA-vp3j-rhgw-hr9f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-6424","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0016.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12042","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1868.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6424","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150427-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/816813","tags":["report"]},{"url":"https://bugzilla.suse.com/843652","tags":["report"]},{"url":"https://bugzilla.suse.com/853846","tags":["report"]},{"url":"https://bugzilla.suse.com/864911","tags":["report"]},{"url":"https://bugzilla.suse.com/874903","tags":["report"]},{"url":"https://bugzilla.suse.com/878433","tags":["report"]},{"url":"https://bugzilla.suse.com/878446","tags":["report"]},{"url":"https://bugzilla.suse.com/879019","tags":["report"]},{"url":"https://bugzilla.suse.com/880745","tags":["report"]},{"url":"https://bugzilla.suse.com/880835","tags":["report"]},{"url":"https://bugzilla.suse.com/883051","tags":["report"]},{"url":"https://bugzilla.suse.com/883516","tags":["report"]},{"url":"https://bugzilla.suse.com/883598","tags":["report"]},{"url":"https://bugzilla.suse.com/886213","tags":["report"]},{"url":"https://bugzilla.suse.com/907268","tags":["report"]},{"url":"https://bugzilla.suse.com/907633","tags":["report"]},{"url":"https://bugzilla.suse.com/915810","tags":["report"]},{"url":"https://bugzilla.suse.com/928520","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3418","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151025-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-6424","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2500-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0255","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3164","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-6424","description":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.","status":"published","published":"2014-01-18T19:00:00Z","modified":"2024-08-06T17:39:01.251Z","updated_at":"2026-11-02T14:34:57.499208Z"}],"euvd":[{"id":"EUVD-2013-6236","description":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.","status":"published","published":"2014-01-18T19:00:00Z","modified":"2024-08-06T17:39:01Z","updated_at":"2026-11-03T01:56:26.306678Z"}],"ghsa":[{"id":"GHSA-vp3j-rhgw-hr9f","title":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context...","description":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.","status":"published","published":"2022-05-13T01:04:23Z","modified":"2023-02-10T05:06:37Z","cwes":["CWE-191"],"updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2013-6424","description":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.","status":"published","published":"2014-01-18T19:55:02.917Z","modified":"2026-06-17T00:00:27.77Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:02:48.062712Z"}],"osv":[{"id":"CVE-2013-6424","description":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.","status":"published","published":"2014-01-18T19:55:02Z","modified":"2026-04-16T06:16:35.300266039Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2013-6424","description":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.","status":"published","published":"2014-01-18T19:55:02.917Z","modified":"2026-09-01T20:03:19.027564994Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DSA-2822-1","title":"xorg-server - integer underflow","status":"published","published":"2013-12-18T00:00:00Z","modified":"2026-03-09T01:21:33.599313Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0016","title":"Updated x11-server package fixes security vulnerability","description":"Bryan Quigley discovered an integer underflow in the Xorg X server which\ncould lead to denial of service or the execution of arbitrary code\n(CVE-2013-6424).\n","status":"published","published":"2014-01-21T16:08:14Z","modified":"2026-04-16T06:23:00.922020313Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10518-1","title":"xorg-x11-server-7.6_1.18.4-2.1 on GA media","description":"These are all security issues fixed in the xorg-x11-server-7.6_1.18.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:35:00.091067Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2013:1868","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-15T21:15:40Z","modified":"2026-06-26T12:21:45.682759959Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"SUSE-SU-2015:0427-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:12:31.989382Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1025-1","title":"Recommended update for xorg-x11-server","description":"\nThis collective update for xorg-x11-server provides the following fixes:\n\n    * Fix a segmentation fault that can occur when X11 packets are\n      forwarded between a client and a server with different endianess.\n      (bnc#874903)\n    * Free software cursor backing pixmap when transition between screens.\n      This fixes a crash in multi screen support when an assert gets hit.\n      (bnc#880835)\n    * Ignore numlock in Xvnc. Following keys from VNC client will be\n      already modulated by numlock on client side. (bnc#878446)\n    * Fix crash when Xinerama gets disabled after RanR12 is initialized.\n      (bnc#878433)\n    * Prevent crash at the end of 2nd server generation when number of\n      privates differ between 1st and 2nd. (bnc#883598)\n    * Move Xinerama disable when only one screen is present to main loop.\n      (bnc#883598)\n    * Improve Xinerama command line option handling. (bnc#883598)\n    * Work around a possible crash when object belongs to a client that no\n      longer exists. (bnc#883516)\n    * Try to make keyboard bell ring on all devices attached to master\n      keyboard. (bnc#879019)\n    * Implement DeleteInputDeviceRequest in Xvnc to avoid server crash when\n      the Xserver restarts after a server reset. (bnc#880745).\n\n","status":"published","published":"2014-06-27T12:01:01Z","modified":"2026-02-04T03:55:40.562616Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2013-6424","description":"Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.","status":"withdrawn","published":"2014-01-18T00:00:00Z","modified":"2026-02-04T03:23:05.62889Z","updated_at":"2026-11-02T15:54:07.421078Z"},{"id":"USN-2500-1","title":"xorg-server, xorg-server-lts-trusty, xorg-server-lts-utopic vulnerabilities","description":"Olivier Fourdan discovered that the X.Org X server incorrectly handled\nXkbSetGeometry requests resulting in an information leak. An attacker able\nto connect to an X server, either locally or remotely, could use this issue\nto possibly obtain sensitive information. (CVE-2015-0255)\n\nIt was discovered that the X.Org X server incorrectly handled certain\ntrapezoids. An attacker able to connect to an X server, either locally or\nremotely, could use this issue to possibly crash the server. This issue\nonly affected Ubuntu 12.04 LTS. (CVE-2013-6424)\n","status":"published","published":"2015-02-17T12:26:40Z","modified":"2026-04-27T15:17:30.204365542Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}