Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxcursor | Aug 30, 2017 | Jun 15, 2013 |
| Debian | — | Upgrade libxcursor | Jul 30, 2024 | Jun 15, 2013 |
| Freebsd | — | Upgrade libXpUpgrade libXresUpgrade libXtstUpgrade libdmxUpgrade libXvUpgrade libXxf86vmUpgrade libFSUpgrade libGLUpgrade libXiUpgrade libXineramaUpgrade libXextUpgrade libXvMCUpgrade libXfixesUpgrade libXcursorUpgrade libXrandrUpgrade libXxf86dgaUpgrade libXtUpgrade waylandUpgrade libXrenderUpgrade xf86-video-openchromeUpgrade libxcbUpgrade libX11 | Dec 10, 2025 | Jun 4, 2013 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Jun 15, 2013 |
| Oracle Solaris | — | Upgrade x11/library/toolkit/libxt to version 1.1.3-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxinerama to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libfs to version 1.0.4-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxext to version 1.3.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libdmx to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxi to version 1.6.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/mesa to version 7.11.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxcb to version 1.8.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxres to version 1.0.6-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxp to version 1.0.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxcursor to version 1.1.13-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxv to version 1.0.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxtst to version 1.2.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxrender to version 0.9.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxfixes to version 5.0-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxxf86vm to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libx11 to version 1.5.0-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxrandr to version 1.3.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxvmc to version 1.0.7-0.175.1.8.0.4.1336 on Solaris 11.1 | May 29, 2017 | Jun 15, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 23, 2013 |
| Suse | — | Upgrade xorg-x11-libs-64bitUpgrade xorg-x11-devel-32bitUpgrade xorg-x11-serverUpgrade xorg-x11-fonts-75dpiUpgrade xorg-x11-fonts-syriacUpgrade xorg-x11-devel-64bitUpgrade xorg-x11-libs-x86Upgrade xorg-x11-docUpgrade xorg-x11-fonts-scalableUpgrade libXcursor1Upgrade xorg-x11-sdkUpgrade sle-sdk-releaseUpgrade libXcursor1-32bitUpgrade xorg-x11-XnestUpgrade libXcursor-develUpgrade xorg-x11-develUpgrade xorg-x11-libsUpgrade xorg-x11-fonts-100dpiUpgrade xorg-x11Upgrade xorg-x11-XvfbUpgrade xorg-x11-XvncUpgrade xorg-x11-server-glxUpgrade xorg-x11-fonts-cyrillicUpgrade xorg-x11-libs-32bitUpgrade libXcursor-devel-32bitUpgrade libXcursorUpgrade xorg-x11-man | Dec 12, 2013 | Jun 15, 2013 |
| Ubuntu | — | Upgrade libxcursor1 | Nov 8, 2024 | Jun 15, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub