Vulnerabilidades / CVE-2017-12184

crítica

CVE-2017-12184

xorg-x11-server: unvalidated lengths in XINERAMA extension

Publicada Modificada CWE 391, 20
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.

Severidad por fuente

NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (media), Ubuntu (media).

Descripción

xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

Paquetes afectados y versiones corregidas

FuentePaqueteCorregido en
alpine 3.10xorg-server1.19.5-r0
alpine 3.11xorg-server1.19.5-r0
alpine 3.12xorg-server1.19.5-r0
alpine 3.13xorg-server1.19.5-r0
alpine 3.14xorg-server1.19.5-r0
alpine 3.15xorg-server1.19.5-r0
alpine 3.16xorg-server1.19.5-r0
alpine 3.17xorg-server1.19.5-r0
alpine 3.18xorg-server1.19.5-r0
alpine 3.19xorg-server1.19.5-r0
alpine 3.20xorg-server1.19.5-r0
alpine 3.21xorg-server1.19.5-r0
Mostrar las 48 entradas de 36 fuentes
FuentePaqueteCorregido en
alpine 3.10xorg-server1.19.5-r0
alpine 3.11xorg-server1.19.5-r0
alpine 3.12xorg-server1.19.5-r0
alpine 3.13xorg-server1.19.5-r0
alpine 3.14xorg-server1.19.5-r0
alpine 3.15xorg-server1.19.5-r0
alpine 3.16xorg-server1.19.5-r0
alpine 3.17xorg-server1.19.5-r0
alpine 3.18xorg-server1.19.5-r0
alpine 3.19xorg-server1.19.5-r0
alpine 3.20xorg-server1.19.5-r0
alpine 3.21xorg-server1.19.5-r0
alpine 3.22xorg-server1.19.5-r0
alpine 3.23xorg-server1.19.5-r0
alpine 3.24xorg-server1.19.5-r0
alpine 3.6xorg-server1.19.5-r0
alpine 3.7xorg-server1.19.5-r0
alpine 3.8xorg-server1.19.5-r0
alpine 3.9xorg-server1.19.5-r0
alpine edgexorg-server1.19.5-r0
debian 11xorg-server2:1.19.5-1
debian 12xorg-server2:1.19.5-1
debian 13xorg-server2:1.19.5-1
debian 14xorg-server2:1.19.5-1
debian 7xorg-server2:1.12.4-6+deb7u8
debian 8xorg-server2:1.16.4-1+deb8u2
debian 9xorg-server2:1.19.2-1+deb9u2
echoxorg-server2:1.19.5-1
Red Hatxorg-x11-serversin corrección indicada
Red Hatxorg-x11-server-Xdmxsin corrección indicada
Red Hatxorg-x11-server-Xephyrsin corrección indicada
Red Hatxorg-x11-server-Xnestsin corrección indicada
Red Hatxorg-x11-server-Xorgsin corrección indicada
Red Hatxorg-x11-server-Xvfbsin corrección indicada
Red Hatxorg-x11-server-Xwaylandsin corrección indicada
Red Hatxorg-x11-server-commonsin corrección indicada
Red Hatxorg-x11-server-develsin corrección indicada
Red Hatxorg-x11-server-sourcesin corrección indicada
root.io debian 11rootio-xorg-server2:1.19.5-1
root.io debian 12rootio-xorg-server2:1.19.5-1
ubuntu 14.04xorg-server2:1.15.1-0ubuntu2.11
ubuntu 14.04xorg-server-lts-xenial2:1.18.3-1ubuntu2.3~trusty4
ubuntu 14.04-ESMxorg-server2:1.15.1-0ubuntu2.11
ubuntu 16.04xorg-server2:1.18.4-0ubuntu0.7
ubuntu 16.04xorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.4
ubuntu 16.04-ESMxorg-server2:1.18.4-0ubuntu0.7
ubuntu 16.04-ESMxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.4
ubuntu 17.04xorg-server2:1.19.3-1ubuntu1.3

Referencias

Las 9 referencias

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.