Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority MEDIUM 48

xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03346 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
Priority MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04302 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
Priority MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04167 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
Priority MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04494 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
Priority MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04233 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
Priority MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04233 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
Priority MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04494 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
TI-2017-08969 CVE-2017-12179 · GHSA-p644-42g7-jq85

Integer overflow in x.org xorg-x11-server

Priority MEDIUM 49

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0437 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
Priority MEDIUM 49

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04423 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
TI-2017-08967 CVE-2017-12177 · GHSA-jwhg-33x6-pr4q

Integer overflow in x.org xorg-x11-server

Priority MEDIUM 49

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0437 Published 2018-01-24 Partial fix · 1.19.5 CWE-391
Priority MEDIUM 49

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04166 Published 2018-01-24 Partial fix · 1.19.5 CWE-391