xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-xorg-server | Aug 22, 2024 | Jan 24, 2018 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 24, 2018 | |
| Debian | debian-upgrade-xorg-server | Oct 18, 2017 | Oct 12, 2017 | |
| Freebsd | freebsd-upgrade-package-xephyrfreebsd-upgrade-package-xorg-dmxfreebsd-upgrade-package-xorg-nestserverfreebsd-upgrade-package-xorg-serverfreebsd-upgrade-package-xorg-vfbserverfreebsd-upgrade-package-xwayland | Oct 13, 2017 | Oct 13, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-base-xorg-server | Nov 13, 2017 | Nov 10, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-xorg-x11-server-commonhuawei-euleros-2_0_sp2-upgrade-xorg-x11-server-xephyrhuawei-euleros-2_0_sp2-upgrade-xorg-x11-server-xorg | Dec 4, 2019 | Jan 24, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-xorg-x11-server-commonhuawei-euleros-2_0_sp3-upgrade-xorg-x11-server-xephyrhuawei-euleros-2_0_sp3-upgrade-xorg-x11-server-xorg | Dec 18, 2019 | Jan 24, 2018 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-x11-server-xdmx-1-14-5-0-175-3-36-0-2-1551oracle-solaris-11-3-upgrade-x11-server-xephyr-1-14-5-0-175-3-36-0-2-1551oracle-solaris-11-3-upgrade-x11-server-xorg-1-14-5-0-175-3-36-0-2-1551oracle-solaris-11-3-upgrade-x11-server-xvfb-1-14-5-0-175-3-36-0-2-1551oracle-solaris-11-3-upgrade-x11-server-xvnc-1-7-1-0-175-3-36-0-2-1551oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Jan 24, 2018 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 24, 2018 |
| Suse | — | suse-upgrade-xorg-x11-serversuse-upgrade-xorg-x11-server-extrasuse-upgrade-xorg-x11-server-sdksuse-upgrade-xorg-x11-xvnc | Oct 20, 2017 | Oct 12, 2017 |
| Ubuntu | ubuntu-upgrade-xserver-xorg-coreubuntu-upgrade-xserver-xorg-core-hwe-16-04ubuntu-upgrade-xserver-xorg-core-lts-xenial | Oct 17, 2017 | Oct 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub