CVE-2017-12181

2017-10-1000:00:00

CWE-391

redhat

www.cve.org

9.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

JSON

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CNA Affected

[
  {
    "product": "xorg-x11-server",
    "vendor": "The X.Org Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "before 1.19.5"
      }
    ]
  }
]