Vulnerability Details : CVE-2013-1940
X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.
Threat overview for CVE-2013-1940
Top countries where our scanners detected CVE-2013-1940
Top open port discovered on systems with this issue
80
IPs affected by CVE-2013-1940 9
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2013-1940!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2013-1940
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 23 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2013-1940
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:P/I:N/A:N |
3.9
|
2.9
|
NIST |
CWE ids for CVE-2013-1940
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-1940
-
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102391.html
[SECURITY] Fedora 18 Update: xorg-x11-server-1.13.3-3.fc18
-
http://www.ubuntu.com/usn/USN-1803-1
USN-1803-1: X.Org X server vulnerability | Ubuntu security notices
-
http://www.openwall.com/lists/oss-security/2013/04/18/3
oss-security - Xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled
-
http://www.debian.org/security/2013/dsa-2661
Debian -- Security Information -- DSA-2661-1 xorg-server
-
https://bugs.freedesktop.org/show_bug.cgi?id=63353
63353 – [CVE-2013-1940] VT-switched servers receive input from hot-plugged devices
-
http://lists.opensuse.org/opensuse-updates/2013-06/msg00015.html
openSUSE-SU-2013:0878-1: moderate: update for xorg-x11-server
-
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104089.html
[SECURITY] Fedora 19 Update: xorg-x11-server-1.14.0-6.fc19
Products affected by CVE-2013-1940
- cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
- cpe:2.3:a:x:x.org-xserver:*:*:*:*:*:*:*:*
- cpe:2.3:a:x:x.org-xserver:1.4.0:*:*:*:*:*:*:*