CVE-2013-6424

Summary

CVE	CVE-2013-6424
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2014-01-18 19:55:02 UTC
Updated	2026-04-29 01:13:23 UTC
Description	Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Risk And Classification

Primary CVSS: v2.0 5 from [email protected]

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS: 0.068400000 probability, percentile 0.913930000 (date 2026-05-03)

Problem Types: CWE-191 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Canonical	Ubuntu Linux	12.04	All	All	All
Operating System	Canonical	Ubuntu Linux	14.04	All	All	All
Operating System	Canonical	Ubuntu Linux	14.10	All	All	All
Operating System	Debian	Debian Linux	6.0	All	All	All
Operating System	Debian	Debian Linux	7.0	All	All	All
Operating System	Opensuse	Opensuse	12.2	All	All	All
Operating System	Opensuse	Opensuse	12.3	All	All	All
Operating System	Opensuse	Opensuse	13.1	All	All	All
Application	Pixman	Pixman	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
openSUSE-SU-2013:1965-1: moderate: xorg-x11-server: fixed an overflow in	af854a3a-2127-422b-91ae-364da2661108	lists.opensuse.org	Mailing List, Third Party Advisory
X.Org Server: Multiple vulnerabilities (GLSA 201710-30) — Gentoo Security	af854a3a-2127-422b-91ae-364da2661108	security.gentoo.org	Third Party Advisory
[PATCH] exa: only draw valid trapezoids	af854a3a-2127-422b-91ae-364da2661108	lists.x.org	Patch
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	rhn.redhat.com	Broken Link
67484 – Corrupted CustomShape crashes Xorg	af854a3a-2127-422b-91ae-364da2661108	bugs.freedesktop.org	Issue Tracking, Patch, Vendor Advisory
Debian -- Security Information -- DSA-2822-1 xorg-server	af854a3a-2127-422b-91ae-364da2661108	www.debian.org	Third Party Advisory
Bug #1197921 “LibreOffice spreadsheet causes full Xorg crash wit...” : Bugs : “xorg-server” package : Ubuntu	af854a3a-2127-422b-91ae-364da2661108	bugs.launchpad.net	Issue Tracking, Patch, Third Party Advisory
USN-2500-1: X.Org X server vulnerabilities \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	www.ubuntu.com	Third Party Advisory
X.Org X Server: Multiple vulnerabilities (GLSA 201701-64) — Gentoo Security	af854a3a-2127-422b-91ae-364da2661108	security.gentoo.org	Third Party Advisory
oss-security - CVE Request: xorg-server and pixman	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com	Mailing List, Third Party Advisory
oss-security - Re: CVE Request: xorg-server and pixman	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com	Mailing List, Third Party Advisory
Red Hat Customer Portal	MITRE	access.redhat.com
access.redhat.com \| CVE-2013-6424	MITRE	access.redhat.com
1037984 – (CVE-2013-6424) CVE-2013-6424 xorg-x11-server: integer underflow when handling trapezoids	MITRE	bugzilla.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

710555 Gentoo Linux X.Org X Server Multiple Vulnerabilities (GLSA 201701-64)
710562 Gentoo Linux X.Org Server Multiple Vulnerabilities (GLSA 201710-30)