Summary
It was discovered that the Wayland Xcursor support incorrectly handled
certain files. An attacker could use these issues to cause Wayland to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | wayland | 1.4.0-1ubuntu1.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | wayland | 1.12.0-1~ubuntu16.04.3 |
Vulnerabilities 1
-
Unscored —
libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicio…
References
-
report
https://ubuntu.com/security/CVE-2017-16612