xorg-x11-server (SUSE:Linux Enterprise Server for SAP Applications 12 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 12 SP3 package xorg-x11-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (25)

• CVE-2017-12176 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause…
• CVE-2017-12177 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X…
• CVE-2017-12178 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server…
• CVE-2017-12179 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to…
• CVE-2017-12180 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to…
• CVE-2017-12181 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash…
• CVE-2017-12182 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash…
• CVE-2017-12183 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or…
• CVE-2017-12184 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or…
• CVE-2017-12185 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to…
• CVE-2017-12186 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash…
• CVE-2017-12187 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or…
• CVE-2021-4011 — CVSS 7.8 (high): A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the…
• CVE-2017-13723 — CVSS 7.8 (high): In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer…
• CVE-2020-14345 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege…
• CVE-2020-14346 — CVSS 7.8 (high): A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead…
• CVE-2021-4008 — CVSS 7.8 (high): A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the…
• CVE-2021-4009 — CVSS 7.8 (high): A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the…
• CVE-2020-14360 — CVSS 7.8 (high): A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege…
• CVE-2020-14361 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a…
• CVE-2020-14362 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a…
• CVE-2020-25712 — CVSS 7.8 (high): A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation…
• CVE-2021-3472 — CVSS 7.8 (high): A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local…
• CVE-2020-14347 — CVSS 5.5 (medium): A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases…
• CVE-2017-13721 — CVSS 4.7 (medium): In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension…