{"action":"Upgrade libx11 to 2:1.5.0-1+deb7u1 or later.","affected":[{"fixed":"2:1.5.0-1+deb7u1","introduced":"0"}],"component":"libx11","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2:1.5.0-1+deb7u1"],"id":"tcs_01M5NAC94YV0B9SM0WXPRJNHSS","modified_at":"2026-09-01T20:03:15.221417345Z","published_at":"2013-06-15T20:55:00.993Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-2004","https://security-tracker.debian.org/tracker/CVE-2013-2004"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-2004","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-2004"}],"summary":"The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows"}