Summary
It was discovered that the X.Org X server incorrectly handled certain
lengths. An attacker able to connect to an X server, either locally or
remotely, could use these issues to crash the server, or possibly execute
arbitrary code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | xorg-server | 2:1.15.1-0ubuntu2.11 |
| Ubuntu · 14.04 LTS 14.04:LTS | xorg-server-lts-xenial | 2:1.18.3-1ubuntu2.3~trusty4 |
| Ubuntu · 16.04 LTS 16.04:LTS | xorg-server | 2:1.18.4-0ubuntu0.7 |
| Ubuntu · 16.04 LTS 16.04:LTS | xorg-server-hwe-16.04 | 2:1.19.3-1ubuntu1~16.04.4 |
Vulnerabilities 12
-
Unscored —
xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing maliciou…
-
Unscored —
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X …
-
Unscored —
xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X clien…
-
Unscored —
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing m…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cau…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cau…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client t…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to caus…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X …
References
-
report
https://ubuntu.com/security/CVE-2017-12176
-
report
https://ubuntu.com/security/CVE-2017-12177
-
report
https://ubuntu.com/security/CVE-2017-12178
-
report
https://ubuntu.com/security/CVE-2017-12179
-
report
https://ubuntu.com/security/CVE-2017-12180
-
report
https://ubuntu.com/security/CVE-2017-12181
-
report
https://ubuntu.com/security/CVE-2017-12182
-
report
https://ubuntu.com/security/CVE-2017-12183
-
report
https://ubuntu.com/security/CVE-2017-12184
-
report
https://ubuntu.com/security/CVE-2017-12185
-
report
https://ubuntu.com/security/CVE-2017-12186
-
report
https://ubuntu.com/security/CVE-2017-12187