CVE-2017-12177

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12184

xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12185

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12182

CVE-2017-12182 affects the X.Org X server (xorg-x11-server) before 1.19.5. The root cause is missing length validation in the XFree86 DRI extension, allowing a malicious X client to crash the X server or potentially execute arbitrary code. Affected software is the xorg-x11-server package prior to...

CVE-2017-12177

CVE-2017-12177 affects xorg-server prior to 1.19.5. The vulnerability arises from an integer overflow in ProcDbeGetVisualInfo, allowing a remote/local X server client to cause a crash or potentially execute arbitrary code. Public advisories (Debian, Arch Linux, Gentoo, Mageia, etc.) indicate the ...

CVE-2017-12178

CVE-2017-12178 affects xorg-server (Xi component) due to an invalid/incorrect length check in ProcXIChangeHierarchy. Exploitation could crash the X server or allow arbitrary code execution. Public advisories and CVE trackers show impact on xorg-server prior to version 1.19.5. Remediation across m...

CVE-2017-12186

CVE-2017-12186 affects xorg-x11-server prior to 1.19.5. The X-Resource extension lacked proper length validation, allowing a malicious X client to crash the X server or potentially execute arbitrary code. Multiple connected advisories corroborate this vulnerability in Xorg/Xserver suites and refe...

CVE-2017-12184

CVE-2017-12184 affects the X.Org X server (xorg-x11-server) prior to version 1.19.5. The root cause is a missing length validation in the XINERAMA extension, which could allow a malicious X client to crash the X server or potentially execute arbitrary code. Public sources in the connected documen...

CVE-2017-12187

CVE-2017-12187 affects xorg-x11-server before 1.19.5, where the RENDER extension lacked proper length validation. This weakness can allow a malicious X client to crash the X server or potentially execute arbitrary code. The issue is documented across multiple sources (NVD entry for CVE-2017-12187...

CVE-2017-12176

The CVE-2017-12176 issue affects xorg-server prior to version 1.19.5. It stems from missing extra length validation in ProcEstablishConnection, enabling a malicious X client to crash the X server and potentially execute arbitrary code. Documents from Debian, Arch Linux, and other vendors (e.g., D...

CVE-2017-12179

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in SProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

Fedora 27 : xorg-x11-server (2017-33506d3f26)

xserver 1.19.5 ---- Update to xserver 1.19.4, multiple stability fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

LibXcursor: User-assisted execution of arbitrary code

Background X.Org X11 libXcursor runtime library. Description It was discovered that libXcursor is prone to several heap overflows when parsing malicious files. Impact A remote attacker, by enticing a user to process a specially crafted cursor file, could possibly execute arbitrary code with the...

MGASA-2018-0011 Updated X11 client libraries packages fix security vulnerability

The XvQueryAdaptors and XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data CVE-2016-5407. The XGetImage function in X.org libX11 before 1.6.4 might allow remo...

Updated X11 client libraries packages fix security vulnerability

The XvQueryAdaptors and XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data CVE-2016-5407. The XGetImage function in X.org libX11 before 1.6.4 might allow remo...

openSUSE Security Update : openssh (openSUSE-2017-1351)

This update for openssh fixes the following issues : Security issue fixed : - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server bsc1065000. Bug fixes : - FIPS: Startup selfchecks bsc1068310. - FIPS: Silent complaints about unsupported key exchange methods bsc1006166...

SUSE-SU-2017:3230-1 Security update for openssh

This update for openssh fixes the following issues: Security issue fixed: - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server bsc1065000. Bug fixes: - FIPS: Startup selfchecks bsc1068310. - FIPS: Silent complaints about unsupported key exchange methods bsc1006166. -...

EulerOS 2.0 SP1 : xorg-x11-server (EulerOS-SA-2017-1295)

According to the version of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In X.Org Server aka xserver and xorg-server before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer,...