CVE-2013-4396: Use After Free
Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
Other sources
X.Org is an open source implementation of the X Window System. A use-after-free flaw was found in the way the X.Org server handled ImageText requests. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4396?
CVE-2013-4396 has a severity rating that allows remote authenticated users to potentially cause a denial of service or execute arbitrary code.
How do I fix CVE-2013-4396?
To fix CVE-2013-4396, upgrade to xorg-x11-server version 1.14.4 or newer.
What software is affected by CVE-2013-4396?
CVE-2013-4396 affects various versions of the xorg-x11-server module prior to 1.14.4.
Can CVE-2013-4396 be exploited remotely?
Yes, CVE-2013-4396 can be exploited by remote authenticated users.
What impact does CVE-2013-4396 have on servers?
CVE-2013-4396 can lead to a denial of service, causing the daemon to crash.