rpm package

suse/xorg-x11-server&distro=SUSE Linux Enterprise Desktop 12 SP3

pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

Vulnerabilities (14)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2017-12187	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12186	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12185	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12184	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12183	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12182	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12181	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12180	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12179	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12178	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12177	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12176	Cri	9.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Jan 24, 2018	xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-13723	Hig	7.8	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Oct 10, 2017	In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbco
CVE-2017-13721	Med	4.7	< 7.6_1.18.3-76.15.2	7.6_1.18.3-76.15.2	Oct 10, 2017	In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.

CVE-2017-12187CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12186CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12185CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12184CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12183CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12182CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12181CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12180CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12179CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12178CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12177CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-12176CriJan 24, 2018
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVE-2017-13723HigOct 10, 2017
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbco
CVE-2017-13721MedOct 10, 2017
affected < 7.6_1.18.3-76.15.2fixed 7.6_1.18.3-76.15.2
In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.