EUVD-2017-3753

Malware in sbrugna...

The vulnerability of the ProcXIChangeHierarchy function in the X Window System Xorg-server allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ProcXIChangeHierarchy function in the X Window System Xorg-server is related to integer overflows. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Code injection

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

ALPINE-CVE-2017-12178

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12178

CVE-2017-12178 affects xorg-server (Xi component) due to an invalid/incorrect length check in ProcXIChangeHierarchy. Exploitation could crash the X server or allow arbitrary code execution. Public advisories and CVE trackers show impact on xorg-server prior to version 1.19.5. Remediation across m...

openSUSE Security Update : xorg-x11-server (openSUSE-2017-1177)

This update for xorg-x11-server fixes the following vulnerabilities : - CVE-2017-12176: Unvalidated extra length in ProcEstablishConnection bsc1063041 - CVE-2017-12177: dbe: Unvalidated variable-length request in ProcDbeGetVisualInfo bsc1063040 - CVE-2017-12178: Xi: fix wrong extra length check i...

[ASA-201710-29] xorg-server: arbitrary code execution

Arch Linux Security Advisory ASA-201710-29 ========================================== Severity: High Date : 2017-10-21 CVE-ID : CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12183 Package : xorg-server Type : arbitrary code execution Remote : Yes Link :...

UBUNTU-CVE-2017-12178

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...