CVE-2013-1995: Buffer Overflow
X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1995?
CVE-2013-1995 is categorized as a medium severity vulnerability due to the potential for a buffer overflow.
How do I fix CVE-2013-1995?
Updating to version 1.7.2 or later of X.org libXi resolves the CVE-2013-1995 vulnerability.
What versions are affected by CVE-2013-1995?
CVE-2013-1995 affects X.org libXi versions 1.7.1 and earlier, including specific versions like 1.5.0, 1.6.2, and others.
What are the consequences of exploiting CVE-2013-1995?
Exploiting CVE-2013-1995 can result in a buffer overflow, leading to possible arbitrary code execution or application crashes.
Is CVE-2013-1995 a zero-day vulnerability?
CVE-2013-1995 was publicly disclosed in May 2013, but it is not classified as a zero-day vulnerability since it is no longer unknown.