Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to…
Priority LOW 35CWE-189Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-189 and the CVSS impact.
Summary
Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.
Why it matters now
EPSS 0.02687 85th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mesa3d:mesa:*:*:*:*:*:*:*:* | up to 9.1.1 | Vulnerable | mesa3d |
| cpe:2.3:a:mesa3d:mesa:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | mesa3d |
| cpe:2.3:a:mesa3d:mesa:9.0.1:*:*:*:*:*:*:* | 9.0.1 | Vulnerable | mesa3d |
| cpe:2.3:a:mesa3d:mesa:9.0.2:*:*:*:*:*:*:* | 9.0.2 | Vulnerable | mesa3d |
| cpe:2.3:a:mesa3d:mesa:9.0.3:*:*:*:*:*:*:* | 9.0.3 | Vulnerable | mesa3d |
| cpe:2.3:a:mesa3d:mesa:9.1:*:*:*:*:*:*:* | 9.1 | Vulnerable | mesa3d |
| cpe:2.3:a:x:libglx:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | X |
- cpe:2.3:a:mesa3d:mesa:*:*:*:*:*:*:*:* Versions up to 9.1.1 Vulnerable ·mesa3d
- cpe:2.3:a:mesa3d:mesa:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·mesa3d
- cpe:2.3:a:mesa3d:mesa:9.0.1:*:*:*:*:*:*:* Versions 9.0.1 Vulnerable ·mesa3d
- cpe:2.3:a:mesa3d:mesa:9.0.2:*:*:*:*:*:*:* Versions 9.0.2 Vulnerable ·mesa3d
- cpe:2.3:a:mesa3d:mesa:9.0.3:*:*:*:*:*:*:* Versions 9.0.3 Vulnerable ·mesa3d
- cpe:2.3:a:mesa3d:mesa:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·mesa3d
- cpe:2.3:a:x:libglx:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·X
Remediation
Red Hat 2 advisories
- RHSA-2013:0898 Released 2013-06-03 · Red Hat rating Moderatemesa security update
- Red Hat Enterprise Linux (v. 5 server) glx-utils-6.5.1-7.11.el5_9, glx-utils-6.5.1-7.11.el5_9.i386, glx-utils-6.5.1-7.11.el5_9.ia64 +38
- RHSA-2013:0897 Released 2013-06-03 · Red Hat rating Importantmesa security update
- Red Hat Enterprise Linux Desktop (v. 6) glx-utils-9.0-0.8.el6_4.3, mesa-9.0-0.8.el6_4.3, mesa-dri-drivers-9.0-0.8.el6_4.3 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) mesa-9.0-0.8.el6_4.3, mesa-demos-9.0-0.8.el6_4.3, mesa-libGL-devel-9.0-0.8.el6_4.3 +3
- Red Hat Enterprise Linux HPC Node (v. 6) mesa-9.0-0.8.el6_4.3, mesa-dri-drivers-9.0-0.8.el6_4.3, mesa-dri-filesystem-9.0-0.8.el6_4.3 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glx-utils-9.0-0.8.el6_4.3, mesa-9.0-0.8.el6_4.3, mesa-demos-9.0-0.8.el6_4.3 +4
- Red Hat Enterprise Linux Server (v. 6) glx-utils-9.0-0.8.el6_4.3, mesa-9.0-0.8.el6_4.3, mesa-dri-drivers-9.0-0.8.el6_4.3 +11
- Red Hat Enterprise Linux Server Optional (v. 6) mesa-9.0-0.8.el6_4.3, mesa-demos-9.0-0.8.el6_4.3, mesa-libOSMesa-9.0-0.8.el6_4.3 +3
- Red Hat Enterprise Linux Workstation (v. 6) glx-utils-9.0-0.8.el6_4.3, mesa-9.0-0.8.el6_4.3, mesa-dri-drivers-9.0-0.8.el6_4.3 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) mesa-9.0-0.8.el6_4.3, mesa-demos-9.0-0.8.el6_4.3, mesa-libOSMesa-9.0-0.8.el6_4.3 +1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2013:0898 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2013:0897 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2013:0897 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2013:0897 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2013:0897 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2013:0897 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2013:0897 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2013:0897 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2013:0897 |
Timeline
- 2026-10-02 Threatist record created from CVE-2013-1993
- 2026-10-03 Alias added: GHSA-4j5x-8p5g-fw48
References
Advisory 7
Other 4
- [Mesa-dev] 20130523 [PATCH:mesa 1/2] integer overflow in XF86DRIOpenConnection() [CVE-2013-1993 1/2]
- http://advisories.mageia.org/MGASA-2013-0190.html
- [Mesa-dev] 20130523 [PATCH:mesa 2/2] integer overflow in XF86DRIGetClientDriverName() [CVE-2013-1993 2/2]
- [oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries
Sources
- CVE-2013-1993 · CVE Program
- CVE-2013-1993 · NVD
- FIRST EPSS
- GHSA-4j5x-8p5g-fw48 · GitHub Advisory Database · CC BY 4.0
- CVE-2013-1993 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences