CVE-2017-12186

Опубликовано: 24 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1509216
Exploit
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e
Patch
Third Party Advisory
https://www.debian.org/security/2017/dsa-4000
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1509216
Exploit
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e
Patch
Third Party Advisory
https://www.debian.org/security/2017/dsa-4000
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*

Версия до 1.19.5 (исключая)

EPSS

Процентиль: 73%

0.00754

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-391

CWE-20

Связанные уязвимости

CVE-2017-12186

CVSS3: 9.8

ubuntu

около 8 лет назад

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVE-2017-12186

CVSS3: 7.5

redhat

больше 8 лет назад

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVE-2017-12186

CVSS3: 9.8

debian

около 8 лет назад

xorg-x11-server before 1.19.5 was missing length validation in X-Resou ...

GHSA-5m98-6wwr-hv6v

CVSS3: 9.8

github

больше 3 лет назад

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

openSUSE-SU-2017:2823-1

suse-cvrf

больше 8 лет назад

Security update for xorg-x11-server

EPSS

Процентиль: 73%

0.00754

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-391

CWE-20