CVE-2017-12187 PUBLISHED

xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

EPSS 0.77% · 73.4th percentile

Risk Scores

EPSS Score
0.77%
73.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSxorg-server0, 2:1.18.4-0ubuntu0.6, 2:1.18.4-0ubuntu0.4
Ubuntu:14.04:LTSxorg-server-lts-xenial2:1.18.3-1ubuntu2.2~trusty2, 0, 2:1.18.3-1ubuntu2.2~trusty1
Ubuntu:14.04:LTSxorg-server2:1.15.1-0ubuntu2.10, 2:1.15.1-0ubuntu2.5, 2:1.15.1-0ubuntu2.6
Ubuntu:16.04:LTSxorg-server-hwe-16.040, 2:1.19.3-1ubuntu1~16.04.3, 2:1.18.4-1ubuntu6.1~16.04.1

Timeline

References

Open in Interactive Console →