ID EULEROS_SA-2018-1003.NASL Type nessus Reporter Tenable Modified 2018-01-25T00:00:00
Description
According to the version of the libXcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :
libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP.(CVE-2017-16612)
Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#
# (C) Tenable Network Security, Inc.
#
include("compat.inc");
if (description)
{
script_id(106144);
script_version("$Revision: 3.2 $");
script_cvs_date("$Date: 2018/01/25 20:11:50 $");
script_cve_id(
"CVE-2017-16612"
);
script_osvdb_id(
169990
);
script_name(english:"EulerOS 2.0 SP1 : libXcursor (EulerOS-SA-2018-1003)");
script_summary(english:"Checks the rpm output for the updated package.");
script_set_attribute(attribute:"synopsis", value:
"The remote EulerOS host is missing a security update.");
script_set_attribute(attribute:"description", value:
"According to the version of the libXcursor packages installed, the
EulerOS installation on the remote host is affected by the following
vulnerability :
- libXcursor before 1.1.15 has various integer overflows
that could lead to heap buffer overflows when
processing malicious cursors, e.g., with programs like
GIMP.(CVE-2017-16612)
Note that Tenable Network Security has extracted the preceding
description block directly from the EulerOS security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
# http://developer.huawei.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1003
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?838fd63d");
script_set_attribute(attribute:"solution", value:
"Update the affected libXcursor package.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"patch_publication_date", value:"2018/01/09");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:libXcursor");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:libXcursor-devel");
script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:2.0");
script_set_attribute(attribute:"plugin_publication_date", value:"2018/01/19");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Huawei Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2018 Tenable Network Security, Inc.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/sp");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/EulerOS/release");
if (isnull(release) || release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS");
if (release !~ "^EulerOS release 2\.0(\D|$)") audit(AUDIT_OS_NOT, "EulerOS 2.0");
sp = get_kb_item("Host/EulerOS/sp");
if (isnull(sp) || sp !~ "^(1)$") audit(AUDIT_OS_NOT, "EulerOS 2.0 SP1");
if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu);
flag = 0;
pkgs = ["libXcursor-1.1.14-2.1.h1",
"libXcursor-devel-1.1.14-2.1.h1"];
foreach (pkg in pkgs)
if (rpm_check(release:"EulerOS-2.0", sp:"1", reference:pkg)) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libXcursor");
}
{"id": "EULEROS_SA-2018-1003.NASL", "bulletinFamily": "scanner", "title": "EulerOS 2.0 SP1 : libXcursor (EulerOS-SA-2018-1003)", "description": "According to the version of the libXcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :\n\n - libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP.(CVE-2017-16612)\n\nNote that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2018-01-19T00:00:00", "modified": "2018-01-25T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=106144", "reporter": "Tenable", "references": ["http://www.nessus.org/u?838fd63d"], "cvelist": ["CVE-2017-16612"], "type": "nessus", "lastseen": "2018-01-26T13:13:10", "history": [{"bulletin": {"bulletinFamily": "scanner", "cpe": ["p-cpe:/a:huawei:euleros:libXcursor-devel", "p-cpe:/a:huawei:euleros:libXcursor", "cpe:/o:huawei:euleros:2.0"], "cvelist": ["CVE-2017-16612"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "According to the version of the libXcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :\n\n - libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP.(CVE-2017-16612)\n\nNote that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 1, "enchantments": {"score": {"modified": "2018-01-19T23:11:44", "value": 5.0}}, "hash": "dde346f4117b829fca3fc5ba37a02d30f379dc88baf8e94efb97329fb38c4bd7", "hashmap": [{"hash": "0ee229bbb8a929b8d1ac80525295b996", "key": "cpe"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "5fe3254ca9f7e2d49bd9a2c35c5dbe58", "key": "pluginID"}, {"hash": "8acef1c33f73aafdb7cffe84eda8c2b1", "key": "published"}, {"hash": "416e9ee6c839322dfd011cab564a5812", "key": "href"}, {"hash": "e2886288f820ce1ebda5eb9bc8e9e9a0", "key": "sourceData"}, {"hash": "5309f9425f02f01a0deeb63ff1ce32b5", "key": "references"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "8acef1c33f73aafdb7cffe84eda8c2b1", "key": "modified"}, {"hash": "73e343ab152c6cae7e0a17ba02d66eda", "key": "cvelist"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "8cea22f328d1d5005101b6cc6d3c70e2", "key": "title"}, {"hash": "67933a273737791ab6f71e29a2605c31", "key": "naslFamily"}, {"hash": "b658b2e89424dbcdd9b4fcb63780b15f", "key": "description"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=106144", "id": "EULEROS_SA-2018-1003.NASL", "lastseen": "2018-01-19T23:11:44", "modified": "2018-01-19T00:00:00", "naslFamily": "Huawei Local Security Checks", "objectVersion": "1.3", "pluginID": "106144", "published": "2018-01-19T00:00:00", "references": ["http://www.nessus.org/u?838fd63d"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106144);\n script_version(\"$Revision: 3.1 $\");\n script_cvs_date(\"$Date: 2018/01/19 14:26:48 $\");\n\n script_cve_id(\n \"CVE-2017-16612\"\n );\n script_osvdb_id(\n 169990\n );\n\n script_name(english:\"EulerOS 2.0 SP1 : libXcursor (EulerOS-SA-2018-1003)\");\n script_summary(english:\"Checks the rpm output for the updated package.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing a security update.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the version of the libXcursor packages installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerability :\n\n - libXcursor before 1.1.15 has various integer overflows\n that could lead to heap buffer overflows when\n processing malicious cursors, e.g., with programs like\n GIMP.(CVE-2017-16612)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # http://developer.huawei.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1003\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?838fd63d\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected libXcursor package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/01/09\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:libXcursor\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:libXcursor-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/01/19\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(1)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\");\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\n\nflag = 0;\n\npkgs = [\"libXcursor-1.1.14-2.1.h1\",\n \"libXcursor-devel-1.1.14-2.1.h1\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"1\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"libXcursor\");\n}\n", "title": "EulerOS 2.0 SP1 : libXcursor (EulerOS-SA-2018-1003)", "type": "nessus", "viewCount": 4}, "differentElements": ["modified", "sourceData"], "edition": 1, "lastseen": "2018-01-19T23:11:44"}], "edition": 2, "hashmap": [{"key": "bulletinFamily", "hash": "bbdaea376f500d25f6b0c1050311dd07"}, {"key": "cpe", "hash": "0ee229bbb8a929b8d1ac80525295b996"}, {"key": "cvelist", "hash": "73e343ab152c6cae7e0a17ba02d66eda"}, {"key": "cvss", "hash": "84813b1457b92d6ba1174abffbb83a2f"}, {"key": "description", "hash": "b658b2e89424dbcdd9b4fcb63780b15f"}, {"key": "href", "hash": "416e9ee6c839322dfd011cab564a5812"}, {"key": "modified", "hash": "b3805d7b78e1e073e2fea1b1dea1a636"}, {"key": "naslFamily", "hash": "67933a273737791ab6f71e29a2605c31"}, {"key": "pluginID", "hash": "5fe3254ca9f7e2d49bd9a2c35c5dbe58"}, {"key": "published", "hash": "8acef1c33f73aafdb7cffe84eda8c2b1"}, {"key": "references", "hash": "5309f9425f02f01a0deeb63ff1ce32b5"}, {"key": "reporter", "hash": "9cf00d658b687f030ebe173a0528c567"}, {"key": "sourceData", "hash": "f3950e0ca047a15b4e327cbec7725870"}, {"key": "title", "hash": "8cea22f328d1d5005101b6cc6d3c70e2"}, {"key": "type", "hash": "5e0bd03bec244039678f2b955a2595aa"}], "hash": "6d73abd417632a98ee5d20227aa3481db6253698ff68d5dd536fc280e91551aa", "viewCount": 4, "enchantments": {"vulnersScore": 6.5}, "objectVersion": "1.3", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106144);\n script_version(\"$Revision: 3.2 $\");\n script_cvs_date(\"$Date: 2018/01/25 20:11:50 $\");\n\n script_cve_id(\n \"CVE-2017-16612\"\n );\n script_osvdb_id(\n 169990\n );\n\n script_name(english:\"EulerOS 2.0 SP1 : libXcursor (EulerOS-SA-2018-1003)\");\n script_summary(english:\"Checks the rpm output for the updated package.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing a security update.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the version of the libXcursor packages installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerability :\n\n - libXcursor before 1.1.15 has various integer overflows\n that could lead to heap buffer overflows when\n processing malicious cursors, e.g., with programs like\n GIMP.(CVE-2017-16612)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # http://developer.huawei.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1003\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?838fd63d\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected libXcursor package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/01/09\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:libXcursor\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:libXcursor-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/01/19\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(1)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\");\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\n\nflag = 0;\n\npkgs = [\"libXcursor-1.1.14-2.1.h1\",\n \"libXcursor-devel-1.1.14-2.1.h1\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"1\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"libXcursor\");\n}\n", "naslFamily": "Huawei Local Security Checks", "pluginID": "106144", "cpe": ["p-cpe:/a:huawei:euleros:libXcursor-devel", "p-cpe:/a:huawei:euleros:libXcursor", "cpe:/o:huawei:euleros:2.0"]}
{"result": {"cve": [{"id": "CVE-2017-16612", "type": "cve", "title": "CVE-2017-16612", "description": "libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.", "published": "2017-12-01T12:29:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16612", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-04-11T11:00:00"}], "nessus": [{"id": "FEDORA_2018-1C5DADA34B.NASL", "type": "nessus", "title": "Fedora 27 : libXcursor (2018-1c5dada34b)", "description": "libXcursor 1.1.15\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2018-03-07T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=107157", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-03-08T10:21:09"}, {"id": "EULEROS_SA-2018-1004.NASL", "type": "nessus", "title": "EulerOS 2.0 SP2 : libXcursor (EulerOS-SA-2018-1004)", "description": "According to the version of the libXcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :\n\n - libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP.(CVE-2017-16612)\n\nNote that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2018-01-19T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=106145", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-01-26T13:11:05"}, {"id": "FEDORA_2018-0EED1BE1C0.NASL", "type": "nessus", "title": "Fedora 26 : libXcursor (2018-0eed1be1c0)", "description": "libXcursor 1.1.15\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2018-03-07T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=107156", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-03-08T09:44:01"}, {"id": "GENTOO_GLSA-201801-04.NASL", "type": "nessus", "title": "GLSA-201801-04 : LibXcursor: User-assisted execution of arbitrary code", "description": "The remote host is affected by the vulnerability described in GLSA-201801-04 (LibXcursor: User-assisted execution of arbitrary code)\n\n It was discovered that libXcursor is prone to several heap overflows when parsing malicious files.\n Impact :\n\n A remote attacker, by enticing a user to process a specially crafted cursor file, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.\n Workaround :\n\n There is no known workaround at this time.", "published": "2018-01-08T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=105630", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-01-27T03:12:03"}, {"id": "UBUNTU_USN-3501-1.NASL", "type": "nessus", "title": "Ubuntu 14.04 LTS / 16.04 LTS / 17.04 / 17.10 : libxcursor vulnerability (USN-3501-1)", "description": "It was discovered that libxcursor incorrectly handled certain files.\nAn attacker could use these issues to cause libxcursor to crash, resulting in a denial of service, or possibly execute arbitrary code.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2017-11-30T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=104884", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-01-31T07:02:39"}, {"id": "DEBIAN_DLA-1201.NASL", "type": "nessus", "title": "Debian DLA-1201-1 : libxcursor security update", "description": "It was discovered that libXcursor, a X cursor management library, is prone to several heap overflows when parsing malicious files. An attacker can take advantage of these flaws for arbitrary code execution, if a user is tricked into processing a specially crafted cursor file.\n\nFor Debian 7 'Wheezy', these problems have been fixed in version 1:1.1.13-1+deb7u2.\n\nWe recommend that you upgrade your libxcursor packages.\n\nNOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2017-12-11T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=105117", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-01-30T00:55:01"}, {"id": "UBUNTU_USN-3622-1.NASL", "type": "nessus", "title": "Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : wayland vulnerability (USN-3622-1)", "description": "It was discovered that the Wayland Xcursor support incorrectly handled certain files. An attacker could use these issues to cause Wayland to crash, resulting in a denial of service, or possibly execute arbitrary code.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2018-04-10T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=108950", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-04-10T23:46:26"}, {"id": "SUSE_SU-2017-3214-1.NASL", "type": "nessus", "title": "SUSE SLED12 / SLES12 Security Update : libXcursor (SUSE-SU-2017:3214-1)", "description": "This update for libXcursor fixes the following issues: Security issue fixed :\n\n - CVE-2017-16612: Fix integeroverflow while parsing images and a signedness issue while parsing comments (bsc#1065386).\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2017-12-06T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=105035", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-02-01T02:53:41"}, {"id": "FREEBSD_PKG_DDECDE18E33B11E7A29354E1AD3D6335.NASL", "type": "nessus", "title": "FreeBSD : libXcursor -- integer overflow that can lead to heap buffer overflow (ddecde18-e33b-11e7-a293-54e1ad3d6335)", "description": "The freedesktop.org project reports :\n\nIt is possible to trigger heap overflows due to an integer overflow while parsing images and a signedness issue while parsing comments.\n\nThe integer overflow occurs because the chosen limit 0x10000 for dimensions is too large for 32 bit systems, because each pixel takes 4 bytes. Properly chosen values allow an overflow which in turn will lead to less allocated memory than needed for subsequent reads.\n\nThe signedness bug is triggered by reading the length of a comment as unsigned int, but casting it to int when calling the function XcursorCommentCreate. Turning length into a negative value allows the check against XCURSOR_COMMENT_MAX_LEN to pass, and the following addition of sizeof (XcursorComment) + 1 makes it possible to allocate less memory than needed for subsequent reads.", "published": "2017-12-18T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=105339", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-02-01T03:07:35"}, {"id": "OPENSUSE-2018-196.NASL", "type": "nessus", "title": "openSUSE Security Update : libXcursor (openSUSE-2018-196)", "description": "This update for libXcursor fixes the following issues :\n\n - CVE-2017-16612: It is possible to trigger heap overflows due to an integer overflow while parsing images and a signedness issue while parsing comments. (boo#1065386)", "published": "2018-02-21T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=106924", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-02-21T23:54:11"}], "ubuntu": [{"id": "USN-3501-1", "type": "ubuntu", "title": "libxcursor vulnerability", "description": "It was discovered that libxcursor incorrectly handled certain files. An attacker could use these issues to cause libxcursor to crash, resulting in a denial of service, or possibly execute arbitrary code.", "published": "2017-11-29T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://usn.ubuntu.com/3501-1/", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-03-29T18:19:30"}], "openvas": [{"id": "OPENVAS:1361412562310843503", "type": "openvas", "title": "Ubuntu Update for wayland USN-3622-1", "description": "Check the version of wayland", "published": "2018-04-10T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843503", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-04-17T17:24:44"}, {"id": "OPENVAS:1361412562310843385", "type": "openvas", "title": "Ubuntu Update for libxcursor USN-3501-1", "description": "Check the version of libxcursor", "published": "2017-11-30T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843385", "cvelist": ["CVE-2017-16612"], "lastseen": "2017-12-21T11:48:17"}, {"id": "OPENVAS:1361412562310704059", "type": "openvas", "title": "Debian Security Advisory DSA 4059-1 (libxcursor - security update)", "description": "It was discovered that libXcursor, a X cursor management library, is\nprone to several heap overflows when parsing malicious files. An\nattacker can take advantage of these flaws for arbitrary code execution,\nif a user is tricked into processing a specially crafted cursor file.", "published": "2017-12-08T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310704059", "cvelist": ["CVE-2017-16612"], "lastseen": "2017-12-21T11:48:07"}, {"id": "OPENVAS:1361412562310874197", "type": "openvas", "title": "Fedora Update for libXcursor FEDORA-2018-1c5dada34b", "description": "Check the version of libXcursor", "published": "2018-03-14T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874197", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-03-20T16:38:06"}, {"id": "OPENVAS:1361412562310874182", "type": "openvas", "title": "Fedora Update for libXcursor FEDORA-2018-0eed1be1c0", "description": "Check the version of libXcursor", "published": "2018-03-14T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874182", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-03-20T16:37:57"}], "gentoo": [{"id": "GLSA-201801-04", "type": "gentoo", "title": "LibXcursor: User-assisted execution of arbitrary code", "description": "### Background\n\nX.Org X11 libXcursor runtime library.\n\n### Description\n\nIt was discovered that libXcursor is prone to several heap overflows when parsing malicious files. \n\n### Impact\n\nA remote attacker, by enticing a user to process a specially crafted cursor file, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll LibXcursor users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=x11-libs/libXcursor-1.1.15\"", "published": "2018-01-07T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://security.gentoo.org/glsa/201801-04", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-01-08T02:51:30"}], "cloudfoundry": [{"id": "CFOUNDRY:CD433251F203CC63F47CBA9B57F2C229", "type": "cloudfoundry", "title": "USN-3501-1: libxcursor vulnerability - Cloud Foundry", "description": "# \n\n# Severity\n\nMedium\n\n# Vendor\n\nCanonical Ubuntu\n\n# Versions Affected\n\n * Canonical Ubuntu 14.04\n\n# Description\n\nIt was discovered that libxcursor incorrectly handled certain files. An attacker could use these issues to cause libxcursor to crash, resulting in a denial of service, or possibly execute arbitrary code.\n\n# Affected Cloud Foundry Products and Versions\n\n_Severity is medium unless otherwise noted._\n\n * All versions of Cloud Foundry cflinuxfs2 prior to 1.171.0\n\n# Mitigation\n\nOSS users are strongly encouraged to follow one of the mitigations below:\n\n * The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs2 version 1.171.0 or later.\n\n# References\n\n * [USN-3501-1](<https://usn.ubuntu.com/3501-1/>)\n * [CVE-2017-16612](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-16612>)\n", "published": "2018-03-13T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.cloudfoundry.org/blog/usn-3501-1/", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-03-13T23:52:50"}], "debian": [{"id": "DSA-4059", "type": "debian", "title": "libxcursor -- security update", "description": "It was discovered that libXcursor, a X cursor management library, is prone to several heap overflows when parsing malicious files. An attacker can take advantage of these flaws for arbitrary code execution, if a user is tricked into processing a specially crafted cursor file.\n\nFor the oldstable distribution (jessie), these problems have been fixed in version 1:1.1.14-1+deb8u1.\n\nFor the stable distribution (stretch), these problems have been fixed in version 1:1.1.14-1+deb9u1.\n\nWe recommend that you upgrade your libxcursor packages.\n\nFor the detailed security status of libxcursor please refer to its security tracker page at: <https://security-tracker.debian.org/tracker/libxcursor>", "published": "2017-12-08T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "http://www.debian.org/security/dsa-4059", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-03-11T00:46:45"}], "slackware": [{"id": "SSA-2017-333-01", "type": "slackware", "title": "libXcursor", "description": "New libXcursor packages are available for Slackware 13.0, 13.1, 13.37, 14.0,\n14.1, 14.2, and -current to fix a security issue.\n\n\nHere are the details from the Slackware 14.2 ChangeLog:\n\npatches/packages/libXcursor-1.1.15-i586-1_slack14.2.txz: Upgraded.\n Fix heap overflows when parsing malicious files. (CVE-2017-16612)\n It is possible to trigger heap overflows due to an integer overflow\n while parsing images and a signedness issue while parsing comments.\n The integer overflow occurs because the chosen limit 0x10000 for\n dimensions is too large for 32 bit systems, because each pixel takes\n 4 bytes. Properly chosen values allow an overflow which in turn will\n lead to less allocated memory than needed for subsequent reads.\n The signedness bug is triggered by reading the length of a comment\n as unsigned int, but casting it to int when calling the function\n XcursorCommentCreate. Turning length into a negative value allows the\n check against XCURSOR_COMMENT_MAX_LEN to pass, and the following\n addition of sizeof (XcursorComment) + 1 makes it possible to allocate\n less memory than needed for subsequent reads.\n For more information, see:\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16612\n (* Security fix *)\n\nWhere to find the new packages:\n\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\n\nAlso see the "Get Slack" section on http://slackware.com for\nadditional mirror sites near you.\n\nUpdated package for Slackware 13.0:\nftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/libXcursor-1.1.15-i486-1_slack13.0.txz\n\nUpdated package for Slackware x86_64 13.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/libXcursor-1.1.15-x86_64-1_slack13.0.txz\n\nUpdated package for Slackware 13.1:\nftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/libXcursor-1.1.15-i486-1_slack13.1.txz\n\nUpdated package for Slackware x86_64 13.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/libXcursor-1.1.15-x86_64-1_slack13.1.txz\n\nUpdated package for Slackware 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/libXcursor-1.1.15-i486-1_slack13.37.txz\n\nUpdated package for Slackware x86_64 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/libXcursor-1.1.15-x86_64-1_slack13.37.txz\n\nUpdated package for Slackware 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/libXcursor-1.1.15-i486-1_slack14.0.txz\n\nUpdated package for Slackware x86_64 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/libXcursor-1.1.15-x86_64-1_slack14.0.txz\n\nUpdated package for Slackware 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/libXcursor-1.1.15-i486-1_slack14.1.txz\n\nUpdated package for Slackware x86_64 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/libXcursor-1.1.15-x86_64-1_slack14.1.txz\n\nUpdated package for Slackware 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/libXcursor-1.1.15-i586-1_slack14.2.txz\n\nUpdated package for Slackware x86_64 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/libXcursor-1.1.15-x86_64-1_slack14.2.txz\n\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/libXcursor-1.1.15-i586-1.txz\n\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/libXcursor-1.1.15-x86_64-1.txz\n\n\nMD5 signatures:\n\nSlackware 13.0 package:\n9da6d590915dc676f7da395c581b6d03 libXcursor-1.1.15-i486-1_slack13.0.txz\n\nSlackware x86_64 13.0 package:\n8cb6a2c7120dd1b9d3fd7f2d88bf26c5 libXcursor-1.1.15-x86_64-1_slack13.0.txz\n\nSlackware 13.1 package:\n23c99da35a637d941160636592d3e6e9 libXcursor-1.1.15-i486-1_slack13.1.txz\n\nSlackware x86_64 13.1 package:\n1b6bcc2c6810a8bc3c390335c3fc32bf libXcursor-1.1.15-x86_64-1_slack13.1.txz\n\nSlackware 13.37 package:\n9c3674a38ef2f20f7debcdc45c412b65 libXcursor-1.1.15-i486-1_slack13.37.txz\n\nSlackware x86_64 13.37 package:\n392f29eff1b4ba268ed88ebc90042142 libXcursor-1.1.15-x86_64-1_slack13.37.txz\n\nSlackware 14.0 package:\n41cf5ec1e976aaef8fdde39a5a1442f4 libXcursor-1.1.15-i486-1_slack14.0.txz\n\nSlackware x86_64 14.0 package:\n5e09cd739380c9b99f742f167c73eb06 libXcursor-1.1.15-x86_64-1_slack14.0.txz\n\nSlackware 14.1 package:\n0029d799edfb779e981479ca36d0f0ce libXcursor-1.1.15-i486-1_slack14.1.txz\n\nSlackware x86_64 14.1 package:\nbc092df828b88b5d562232b333b06006 libXcursor-1.1.15-x86_64-1_slack14.1.txz\n\nSlackware 14.2 package:\n4df9278d456bbdeca3a2f0d436a98787 libXcursor-1.1.15-i586-1_slack14.2.txz\n\nSlackware x86_64 14.2 package:\n7ebfaf2fe73c7fb0f06f13772836a54c libXcursor-1.1.15-x86_64-1_slack14.2.txz\n\nSlackware -current package:\nf1ec7555584a35f75d7538143ceaaea0 x/libXcursor-1.1.15-i586-1.txz\n\nSlackware x86_64 -current package:\n4f11abb90aa9aca34a475f100d6ac062 x/libXcursor-1.1.15-x86_64-1.txz\n\n\nInstallation instructions:\n\nUpgrade the package as root:\n > upgradepkg libXcursor-1.1.15-i586-1_slack14.2.txz", "published": "2017-11-29T00:19:08", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.618566", "cvelist": ["CVE-2017-16612"], "lastseen": "2018-02-02T18:11:39"}], "freebsd": [{"id": "DDECDE18-E33B-11E7-A293-54E1AD3D6335", "type": "freebsd", "title": "libXcursor -- integer overflow that can lead to heap buffer overflow", "description": "\nThe freedesktop.org project reports:\n\nIt is possible to trigger heap overflows due to an integer\n\t overflow while parsing images and a signedness issue while\n\t parsing comments.\nThe integer overflow occurs because the chosen limit 0x10000\n\t for dimensions is too large for 32 bit systems, because each pixel\n\t takes 4 bytes. Properly chosen values allow an overflow which in\n\t turn will lead to less allocated memory than needed for subsequent\n\t reads.\nThe signedness bug is triggered by reading the length of a comment\n\t as unsigned int, but casting it to int when calling the function\n\t XcursorCommentCreate. Turning length into a negative value allows\n\t the check against XCURSOR_COMMENT_MAX_LEN to pass, and the following\n\t addition of sizeof (XcursorComment) + 1 makes it possible to\n\t allocate less memory than needed for subsequent reads.\n\n", "published": "2017-11-28T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://vuxml.freebsd.org/freebsd/ddecde18-e33b-11e7-a293-54e1ad3d6335.html", "cvelist": ["CVE-2017-16612"], "lastseen": "2017-12-17T18:34:29"}]}}