Detections
Analytics
openSUSE Security Update : libXi (openSUSE-SU-2013:1033-1)
medium Nessus Plugin ID 75039
Language:
Synopsis
The remote openSUSE host is missing a security update.Description
This update of libXi fixes several integer overflow issues.- U_0001-integer-overflow-in-XGetDeviceControl-CVE-2013-19 84-.patch, U_0002-integer-overflow-in-XGetFeedbackControl-CVE-2013- 198.patch, U_0003-integer-overflow-in-XGetDeviceDontPropagateList-C VE-.patch, U_0004-integer-overflow-in-XGetDeviceMotionEvents-CVE-20 13-.patch, U_0005-integer-overflow-in-XIGetProperty-CVE-2013-1984-5
-8.patch, U_0006-integer-overflow-in-XIGetSelectedEvents-CVE-2013- 198.patch, U_0007-Avoid-integer-overflow-in-XGetDeviceProperties-CV E-2.patch, U_0008-Avoid-integer-overflow-in-XListInputDevices-CVE-2 013.patch
- integer overflow in various functions [CVE-2013-1984] (bnc#821663, bnc#815451)
- U_0001-sign-extension-issue-in-XListInputDevices-CVE-201 3-1.patch
- sign extension issue in XListInputDevices() [CVE-2013-1995] (bnc#821663, bnc#815451)
- U_0001-Stack-buffer-overflow-in-XGetDeviceButtonMapping- CVE.patch, U_0002-memory-corruption-in-_XIPassiveGrabDevice-CVE-201 3-1.patch, U_0003-unvalidated-lengths-in-XQueryDeviceState-CVE-2013
-19.patch
- Stack-based buffer overflow in XGetDeviceButtonMapping(), memory corruption in
_XIPassiveGrabDevice(), unvalidated lengths in XQueryDeviceState() [CVE-2013-1998] (bnc#821663, bnc#815451)
Solution
Update the affected libXi packages.See Also
https://bugzilla.novell.com/show_bug.cgi?id=815451
https://bugzilla.novell.com/show_bug.cgi?id=821663
https://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html
Plugin Details
Severity: Medium
ID: 75039
File Name: openSUSE-2013-503.nasl
Version: 1.6
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 6/13/2014
Updated: 1/19/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:libxi-debugsource, p-cpe:/a:novell:opensuse:libxi-devel, p-cpe:/a:novell:opensuse:libxi-devel-32bit, p-cpe:/a:novell:opensuse:libxi6, p-cpe:/a:novell:opensuse:libxi6-32bit, p-cpe:/a:novell:opensuse:libxi6-debuginfo, p-cpe:/a:novell:opensuse:libxi6-debuginfo-32bit, cpe:/o:novell:opensuse:12.2, cpe:/o:novell:opensuse:12.3
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 6/7/2013