VDB

CVE-2017-12178

CVE-2017-12178 PUBLISHED CVSS 9.800000190734863 CRITICAL

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

EPSS 4.17% · 90.5th percentile

Risk Scores

CVSS 3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
4.17%
90.5th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSxorg-server-lts-xenial2:1.18.3-1ubuntu2.2~trusty3, 2:1.18.3-1ubuntu2.3~trusty3, 2:1.18.3-1ubuntu2.3~trusty2
Ubuntu:16.04:LTSxorg-server2:1.18.1-1ubuntu4, 2:1.18.3-1ubuntu2.2, 2:1.18.3-1ubuntu2.3
Ubuntu:14.04:LTSxorg-server2:1.14.3-3ubuntu4, 2:1.14.3-5ubuntu1, 2:1.14.4-1ubuntu1
Ubuntu:16.04:LTSxorg-server-hwe-16.040, 2:1.19.3-1ubuntu1~16.04.3, 2:1.19.3-1ubuntu1~16.04.2

Timeline

  • Oct 12, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Nov 9, 2022 EPSS Score
  • Mar 15, 2023 EPSS Score
  • May 8, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›