Integer overflow in Pixman

CVE-2013-6424

Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

EPSS: 0.029 (85.4th percentile) — read the EPSS interpretation.

Affected products

Pixman
Canonical Ubuntu_linux — versions 12.04, 14.04, 14.10
Debian Debian_linux — versions 6.0, 7.0
Opensuse — versions 12.2, 12.3, 13.1
N/a — versions n/a

Weakness classification (CWE)

CWE-191 — Integer Underflow

References

secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Broken Link)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)