xorg-x11-server (SUSE:Linux Enterprise Software Development Kit 11 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 11 SP4 package xorg-x11-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (16)

• CVE-2017-12186 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash…
• CVE-2017-12187 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or…
• CVE-2017-12176 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause…
• CVE-2017-12177 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X…
• CVE-2017-12178 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server…
• CVE-2017-12179 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to…
• CVE-2017-12180 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to…
• CVE-2017-12181 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash…
• CVE-2017-12182 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash…
• CVE-2017-12183 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or…
• CVE-2017-12184 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or…
• CVE-2017-12185 — CVSS 9.8 (critical): xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to…
• CVE-2017-10971 — CVSS 8.8 (high): In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by…
• CVE-2017-13723 — CVSS 7.8 (high): In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer…
• CVE-2018-14665 — CVSS 6.6 (medium): A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X…
• CVE-2017-10972 — CVSS 6.5 (medium): Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious…