CVE-2017-12181: Input Validation
Missing length validation was found in XFree86 DGA extension.
Upstream patch:
https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b
Other sources
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-12181?
CVE-2017-12181 is a vulnerability in xorg-x11-server before version 1.19.5 that allows a malicious X client to crash the X server or potentially execute arbitrary code.
What is the severity of CVE-2017-12181?
The severity of CVE-2017-12181 is classified as critical with a CVSS score of 9.8.
What is the affected software for CVE-2017-12181?
The affected software for CVE-2017-12181 includes xorg-server versions before 1.19.5, xorg-x11-server versions up to exclusive 1.19.5, and Debian Linux versions 8.0 and 9.0.
How can I fix CVE-2017-12181?
To fix CVE-2017-12181, update xorg-server to version 1.19.5 or later, or apply the appropriate security patches for your specific operating system.
Where can I find more information about CVE-2017-12181?
More information about CVE-2017-12181 can be found in the references: [link1], [link2], [link3].