CVE-2017-12183

Опубликовано: 24 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1509224
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201711-05
Third Party Advisory
VDB Entry
https://www.debian.org/security/2017/dsa-4000
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1509224
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201711-05
Third Party Advisory
VDB Entry
https://www.debian.org/security/2017/dsa-4000
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*

Версия до 1.19.5 (исключая)

EPSS

Процентиль: 76%

0.0095

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-391

CWE-20

Связанные уязвимости

CVE-2017-12183

CVSS3: 9.8

ubuntu

около 8 лет назад

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVE-2017-12183

CVSS3: 7.5

redhat

больше 8 лет назад

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVE-2017-12183

CVSS3: 9.8

debian

около 8 лет назад

xorg-x11-server before 1.19.5 was missing length validation in XFIXES ...

GHSA-f4jr-cvv4-j93w

CVSS3: 9.8

github

больше 3 лет назад

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

openSUSE-SU-2017:2823-1

suse-cvrf

больше 8 лет назад

Security update for xorg-x11-server

EPSS

Процентиль: 76%

0.0095

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-391

CWE-20