CVE-2017-12186 PUBLISHED

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

EPSS 0.75% · 73.1th percentile

Risk Scores

EPSS Score
0.75%
73.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSxorg-server2:1.18.4-0ubuntu0.6, 2:1.18.4-0ubuntu0.4, 2:1.18.4-0ubuntu0.3
Ubuntu:14.04:LTSxorg-server2:1.15.1-0ubuntu2.1, 2:1.15.1-0ubuntu2.4, 2:1.15.1-0ubuntu2.5
Ubuntu:14.04:LTSxorg-server-lts-xenial2:1.18.3-1ubuntu2.3~trusty3, 2:1.18.3-1ubuntu2.3~trusty2, 2:1.18.3-1ubuntu2.3~trusty1
Ubuntu:16.04:LTSxorg-server-hwe-16.040, 2:1.18.4-1ubuntu6.1~16.04.1, 2:1.18.4-1ubuntu6.1~16.04.2

Timeline

References

Open in Interactive Console →