CVE-2017-12177CWE-391

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or…

published January 24, 2018

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

⚠️ An integer overflow in the X server could turn your graphical environment on its head! Picture a rogue artist with a paintbrush that can go wild if you let them in. 🎨 Think of the X server as a theater, where the ProcDbeGetVisualInfo function is the stage manager. If a mischievous guest can manipulate the stage layout without permission, the entire production could crash or even cause mayhem on stage! In the worst case, a crafty attacker could crash the X server, leaving users stuck in a black screen of despair. Or, they might even be able to execute arbitrary code, turning your vibrant show into an unexpected horror story!

Put simply

Think of the X server as a theater, where the ProcDbeGetVisualInfo function is the stage manager. If a mischievous guest can manipulate the stage layout without permission, the entire production could crash or even cause mayhem on stage! This vulnerability arises from an integer overflow in the ProcDbeGetVisualInfo function of the xorg-x11-server prior to version 1.19.5, which can be exploited by a malicious X client to compromise the server's stability or security.

What to do

In the worst case, a crafty attacker could crash the X server, leaving users stuck in a black screen of despair. Or, they might even be able to execute arbitrary code, turning your vibrant show into an unexpected horror story! To safeguard your system, update the xorg-x11-server to version 1.19.5 or later. It’s crucial to keep your software up-to-date and regularly monitor for new patches. Don't forget to check your configurations to minimize any attack surfaces! You've got this! By following these steps, you can ensure your X server is protected and your graphics environment stays vibrant. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04370 · 91.2th percentile
Weakness
CWE-391 · Unchecked Error Condition
Published
2018-01-24T15:00Z
EPSS history
Timeline
  • 24 JAN 15:00Z
    xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or…
    cvelistv5