CVE-2013-6424

Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

• CWE-191

• http://lists.opensuse.org/opensuse-updates/2013-12/msg00127.htmlMailing List, Third Party Advisory
• http://lists.x.org/archives/xorg-devel/2013-October/037996.htmlPatch
• http://rhn.redhat.com/errata/RHSA-2013-1868.htmlBroken Link
• http://www.debian.org/security/2013/dsa-2822Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/12/03/8Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/12/04/8Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-2500-1Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=67484Issue Tracking, Patch, Vendor Advisory
• https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201701-64Third Party Advisory
• https://security.gentoo.org/glsa/201710-30Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00127.htmlMailing List, Third Party Advisory
• http://lists.x.org/archives/xorg-devel/2013-October/037996.htmlPatch
• http://rhn.redhat.com/errata/RHSA-2013-1868.htmlBroken Link
• http://www.debian.org/security/2013/dsa-2822Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/12/03/8Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/12/04/8Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-2500-1Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=67484Issue Tracking, Patch, Vendor Advisory
• https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201701-64Third Party Advisory
• https://security.gentoo.org/glsa/201710-30Third Party Advisory

Published

Jan 18, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6418PyWBEM 0.7 and earlier uses a separate connection to validat…
• CVE-2013-6419Interaction error in OpenStack Nova and Neutron before Havan…
• CVE-2013-6420The asn1_time_to_time_t function in ext/openssl/openssl.c in…
• CVE-2013-6421The unpack_zip function in archive_unpacker.rb in the sprout…
• CVE-2013-6422The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when di…
• CVE-2013-6423Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6425Integer underflow in the pixman_trapezoid_valid macro in pix…
• CVE-2013-6426The cloudformation-compatible API in OpenStack Orchestration…
• CVE-2013-6427upgrade.py in the hp-upgrade service in HP Linux Imaging and…
• CVE-2013-6428The ReST API in OpenStack Orchestration API (Heat) before Ha…
• CVE-2013-6429The SourceHttpMessageConverter in Spring MVC in Spring Frame…
• CVE-2013-6430The JavaScriptUtils.javaScriptEscape method in web/util/Java…5.4