CVE-2008-1377: x x11 Numeric Errors

CVSS: 9.0v2.0HighModified

AliasesDEBIAN-CVE-2008-1377

Published 16-06-2008Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2008-1377 is a high (CVSS 9.0) Numeric Errors vulnerability in x x11. EPSS estimates a 2.70% chance of exploitation in the next 30 days, higher than 85.7% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.0/10

010

High · v2.0 (NVD)

EPSS score

2.70%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 1

DSA-1595-1 DTSA-141-1 OPENSUSE-SU-2024:11525-1 RHSA-2008:0502 RHSA-2008:0503 RHSA-2008:0504+1 more

Timeline

16-06-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.

CVSS metrics

1 score · 1 source · 1 version

v2.09.0

EPSS trend

Probability

2.70%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

0.00 pp

From 2.70% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Debian1 product

xorg-server< 2:1.4.1~git20080517-2

X1 product

x11r7.3

2 vendors · 2 products

References

49 links

issues.rpath.com/browse/RPL-2607X Refsource CONFIRM
secunia.com/advisories/30629Third Party AdvisoryX Refsource SECUNIAVendor Advisory
labs.idefense.com/intelligence/vulnerabilities/display.php?id=721Third Party AdvisoryX Refsource IDEFENSE
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10109VDB EntrySignatureX Refsource OVAL
sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/33937Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30664Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:115Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/archive/1/493550/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/31025Third Party AdvisoryX Refsource SECUNIA

Show all 49 references

rhn.redhat.com/errata/RHSA-2008-0502.htmlVendor AdvisoryX Refsource REDHATPatch
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321Vendor AdvisoryX Refsource HP
support.apple.com/kb/HT3438X Refsource CONFIRM
lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlVendor AdvisoryX Refsource APPLE
www.vupen.com/english/advisories/2008/1833VDB EntryX Refsource VUPEN
wiki.rpath.com/wiki/Advisories:rPSA-2008-0201X Refsource CONFIRM
security.gentoo.org/glsa/glsa-200806-07.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/30715Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30666Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/30627Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/30637Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:116Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2008/1803VDB EntryX Refsource VUPEN
support.avaya.com/elmodocs2/security/ASA-2008-249.htmX Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.htmlVendor AdvisoryX Refsource SUSEPatch
secunia.com/advisories/30772Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1020247VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2008-0503.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/30628Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/30659Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/31109Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/1983/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/30671Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30809Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/3000VDB EntryX Refsource VUPEN
lists.freedesktop.org/archives/xorg/2008-June/036026.htmlMailing ListX Refsource MLIST
rhn.redhat.com/errata/RHSA-2008-0504.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/32545Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30843Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1595Vendor AdvisoryX Refsource DEBIANPatch
www.ubuntu.com/usn/usn-616-1Vendor AdvisoryX Refsource UBUNTUPatch
secunia.com/advisories/32099Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-2619X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2008-0512.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/archive/1/493548/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/30630Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200807-07.xmlVendor AdvisoryX Refsource GENTOO
security-tracker.debian.org/tracker/CVE-2008-1377Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities