xorg-x11-server (SUSE:Linux Enterprise Server for SAP Applications 12 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 12 SP2 package xorg-x11-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (24)

• CVE-2017-12186 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash…
• CVE-2017-12187 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or…
• CVE-2017-12176 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause…
• CVE-2017-12177 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X…
• CVE-2017-12178 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server…
• CVE-2017-12179 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to…
• CVE-2017-12180 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to…
• CVE-2017-12181 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash…
• CVE-2017-12182 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash…
• CVE-2017-12183 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or…
• CVE-2017-12184 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or…
• CVE-2017-12185 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to…
• CVE-2017-10971 — CVSS 8.8 (high): In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by…
• CVE-2020-25712 — CVSS 7.8 (high): A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation…
• CVE-2020-14346 — CVSS 7.8 (high): A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead…
• CVE-2020-14360 — CVSS 7.8 (high): A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege…
• CVE-2020-14361 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a…
• CVE-2020-14362 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a…
• CVE-2017-13723 — CVSS 7.8 (high): In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer…
• CVE-2020-14345 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege…
• CVE-2017-10972 — CVSS 6.5 (medium): Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious…
• CVE-2017-2624 — CVSS 5.9 (medium): It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies…
• CVE-2020-14347 — CVSS 5.5 (medium): A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases…
• CVE-2017-13721 — CVSS 4.7 (medium): In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension…