CVE-2017-12178

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12177

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12179

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in SProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12187

xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12177

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12181

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12178

CVE-2017-12178 affects xorg-server (Xi component) due to an invalid/incorrect length check in ProcXIChangeHierarchy. Exploitation could crash the X server or allow arbitrary code execution. Public advisories and CVE trackers show impact on xorg-server prior to version 1.19.5. Remediation across m...

CVE-2017-12187

CVE-2017-12187 affects xorg-x11-server before 1.19.5, where the RENDER extension lacked proper length validation. This weakness can allow a malicious X client to crash the X server or potentially execute arbitrary code. The issue is documented across multiple sources (NVD entry for CVE-2017-12187...

CVE-2017-12176

The CVE-2017-12176 issue affects xorg-server prior to version 1.19.5. It stems from missing extra length validation in ProcEstablishConnection, enabling a malicious X client to crash the X server and potentially execute arbitrary code. Documents from Debian, Arch Linux, and other vendors (e.g., D...

CVE-2017-12184

CVE-2017-12184 affects the X.Org X server (xorg-x11-server) prior to version 1.19.5. The root cause is a missing length validation in the XINERAMA extension, which could allow a malicious X client to crash the X server or potentially execute arbitrary code. Public sources in the connected documen...

CVE-2017-12186

CVE-2017-12186 affects xorg-x11-server prior to 1.19.5. The X-Resource extension lacked proper length validation, allowing a malicious X client to crash the X server or potentially execute arbitrary code. Multiple connected advisories corroborate this vulnerability in Xorg/Xserver suites and refe...

CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12182

CVE-2017-12182 affects the X.Org X server (xorg-x11-server) before 1.19.5. The root cause is missing length validation in the XFree86 DRI extension, allowing a malicious X client to crash the X server or potentially execute arbitrary code. Affected software is the xorg-x11-server package prior to...

CVE-2017-12177

CVE-2017-12177 affects xorg-server prior to 1.19.5. The vulnerability arises from an integer overflow in ProcDbeGetVisualInfo, allowing a remote/local X server client to cause a crash or potentially execute arbitrary code. Public advisories (Debian, Arch Linux, Gentoo, Mageia, etc.) indicate the ...

CVE-2017-12179

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in SProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

Fedora 27 : xorg-x11-server (2017-33506d3f26)

xserver 1.19.5 ---- Update to xserver 1.19.4, multiple stability fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

EulerOS 2.0 SP1 : xorg-x11-server (EulerOS-SA-2017-1295)

According to the version of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In X.Org Server aka xserver and xorg-server before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer,...

EulerOS 2.0 SP2 : xorg-x11-server (EulerOS-SA-2017-1296)

According to the version of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In X.Org Server aka xserver and xorg-server before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer,...

SUSE SLED12 / SLES12 Security Update : xorg-x11-server (SUSE-SU-2017:3047-1)

This update for xorg-x11-server fixes several issues. These security issues were fixed : - CVE-2017-13721: Missing validation of shmseg resource id in Xext/XShm could lead to shared memory segments of other users beeing freed bnc1052984 - CVE-2017-13723: A local denial of service via unusual...