---
title: "CVE-2013-2001\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2013-2001?format=md
keywords: index, follow
---

# CVE-2013-2001

Publication date 23 May 2013

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to
cause a denial of service (crash) and possibly execute arbitrary code via
crafted length or index values to the XF86VidModeGetGammaRamp function.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| libxxf86vm | 13.04 raring | Fixed 1:1.1.2-1ubuntu0.13.04.1 |
| 12.10 quantal | Fixed 1:1.1.2-1ubuntu0.12.10.1 |
| 12.04 LTS precise | Fixed 1:1.1.1-2ubuntu0.1 |
| 10.04 LTS lucid | Ignored end of life |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)
* [Patch details](https://ubuntu.com/security/CVE-2013-2001?format=md#patch-details)

### Patch details

For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)

| Package | Patch details |
| --- | --- |
| libxxf86vm | * Upstream:   [?id=ef9](http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=ef95f1c3737d9efc7d97fb1784f80ef3540a846b) * Upstream:   [?id=a89](http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=a89b1ad3377bfef9bab52f15f98b00f6540d531a) * Upstream:   [?id=8ed](http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=8ed00bd0a7c44c7fece687e2566d920ea74ef809) * Upstream:   [?id=6c8](http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=6c82906f25abcb0f8ec92bcdaf1872bd8b63ca5d) * Upstream:   [?id=d03](http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=d0355b28dd53fba6fb29c350e090ed4a73d4c480) * Upstream:   [?id=284](http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=284a88e21fc05a63466115b33efa411c60d988c9) * Upstream:   [?id=47b](http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=47bb28ac0e6e49d3b6eb90c7c215f2fcf54f1a95) * Upstream:   [?id=4c4](http://cgit.freedesktop.org/xorg/lib/libXxf86vm/commit/?id=4c4123441e40da97acd10f58911193ad3dcef5cd) |

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2001)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2013-2001)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2013-2001)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2013-2001)

### Related Ubuntu Security Notices (USN)

+ [USN-1870-1](https://usn.ubuntu.com/USN-1870-1)
+ libxxf86vm vulnerability
+ 5 June 2013

### Other references

* <http://www.x.org/wiki/Development/Security/Advisory-2013-05-23>
* <http://www.debian.org/security/2013/dsa-2692>
* <https://www.cve.org/CVERecord?id=CVE-2013-2001>