Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

The remote host is affected by the vulnerability described in GLSA-201710-30 (X.Org Server: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org Server. Please       review the referenced CVE identifiers for details.
  Impact :

    A local attacker could cause a global buffer overflow or a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time

The remote host is affected by the vulnerability described in GLSA-201701-64 (X.Org X Server: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org X Server. Please       review the CVE identifiers referenced below for details.
  Impact :

    An authenticated attacker could possibly cause a Denial of Service       condition or read from or send information to arbitrary X11 clients.
  Workaround :

    There is no known workaround at this time.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2500-1 advisory.

    Olivier Fourdan discovered that the X.Org X server incorrectly handled XkbSetGeometry requests resulting     in an information leak. An attacker able to connect to an X server, either locally or remotely, could use     this issue to possibly obtain sensitive information. (CVE-2015-0255)

    It was discovered that the X.Org X server incorrectly handled certain trapezoids. An attacker able to     connect to an X server, either locally or remotely, could use this issue to possibly crash the server.
    This issue only affected Ubuntu 12.04 LTS. (CVE-2013-6424)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The X server was updated to fix a possible X server crash using invalid trapezoids. (bnc#853846 CVE-2013-6424)

An integer overflow, which led to a heap-based buffer overflow, was found in the way X.Org server handled trapezoids. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.
(CVE-2013-6424)

Updated x11-server package fixes security vulnerability :

Bryan Quigley discovered an integer underflow in the Xorg X server which could lead to denial of service or the execution of arbitrary code (CVE-2013-6424).

This update fixes the following security issue with xorg-x11-server :

  - integer underflow when handling trapezoids     (CVE-2013-6424). (bnc#853846)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1868 advisory.

    X.Org is an open source implementation of the X Window System. It provides     the basic low-level functionality that full-fledged graphical user     interfaces are designed upon.

    An integer overflow, which led to a heap-based buffer overflow, was found     in the way X.Org server handled trapezoids. A malicious, authorized client     could use this flaw to crash the X.Org server or, potentially, execute     arbitrary code with root privileges. (CVE-2013-6424)

    All xorg-x11-server users are advised to upgrade to these updated     packages, which contain a backported patch to correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2013:1868 :

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

An integer overflow, which led to a heap-based buffer overflow, was found in the way X.Org server handled trapezoids. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.
(CVE-2013-6424)

All xorg-x11-server users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

An integer overflow, which led to a heap-based buffer overflow, was found in the way X.Org server handled trapezoids. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.
(CVE-2013-6424)

All xorg-x11-server users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

Bryan Quigley discovered an integer underflow in the Xorg X server which could lead to denial of service or the execution of arbitrary code.

ID	Name	Product	Family	Severity
104231	GLSA-201710-30 : X.Org Server: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
96786	GLSA-201701-64 : X.Org X Server: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
81398	Ubuntu 14.04 LTS : X.Org X server vulnerabilities (USN-2500-1)	Nessus	Ubuntu Local Security Checks	critical
74877	openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1965-1)	Nessus	SuSE Local Security Checks	medium
72295	Amazon Linux AMI : xorg-x11-server (ALAS-2014-277)	Nessus	Amazon Linux Local Security Checks	medium
72132	Mandriva Linux Security Advisory : x11-server (MDVSA-2014:020)	Nessus	Mandriva Local Security Checks	medium
71937	SuSE 11.2 / 11.3 Security Update : xorg-x11-server (SAT Patch Numbers 8686 / 8687)	Nessus	SuSE Local Security Checks	medium
71631	Scientific Linux Security Update : xorg-x11-server on SL5.x, SL6.x i386/x86_64 (20131220)	Nessus	Scientific Linux Local Security Checks	medium
71612	RHEL 5 / 6 : xorg-x11-server (RHSA-2013:1868)	Nessus	Red Hat Local Security Checks	high
71610	Oracle Linux 5 / 6 : xorg-x11-server (ELSA-2013-1868)	Nessus	Oracle Linux Local Security Checks	medium
71583	CentOS 5 / 6 : xorg-x11-server (CESA-2013:1868)	Nessus	CentOS Local Security Checks	medium
71527	Debian DSA-2822-1 : xorg-server - integer underflow	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2013-6424

high

Tenable Plugins

high

high

critical

medium

medium

medium

medium

medium

high

medium

medium

medium