rpm package
suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 12-LTSS
pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-10972 | Med | 6.5 | < 7.6_1.15.2-30.22.1 | 7.6_1.15.2-30.22.1 | Jul 6, 2017 | Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server. | |
| CVE-2017-10971 | Hig | 8.8 | < 7.6_1.15.2-30.22.1 | 7.6_1.15.2-30.22.1 | Jul 6, 2017 | In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events. |
- affected < 7.6_1.15.2-30.22.1fixed 7.6_1.15.2-30.22.1
Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.
- affected < 7.6_1.15.2-30.22.1fixed 7.6_1.15.2-30.22.1
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.