csaf_suse - suse-su-2017:3025-1

Vulnerability from csaf_suse

Published

2017-11-16 11:57

Modified

2017-11-16 11:57

Summary

Security update for xorg-x11-server

Notes

Title of the patch

Security update for xorg-x11-server

Description of the patch

This update for xorg-x11-server provides several fixes. These security issues were fixed: - CVE-2017-13723: Prevent local DoS via unusual characters in XkbAtomText and XkbStringText (bsc#1051150). - Improve the entropy when generating random data used in X.org server authorization cookies generation by using getentropy() and getrandom() when available (bsc#1025084) - CVE-2017-12184,CVE-2017-12185,CVE-2017-12186,CVE-2017-12187: Fixed unvalidated lengths in multiple extensions (bsc#1063034) - CVE-2017-12183: Fixed some unvalidated lengths in the XFIXES extension. (bsc#1063035) - CVE-2017-12180,CVE-2017-12181,CVE-2017-12182: Fixed various unvalidated lengths in the XFree86-VidMode/XFree86-DGA/XFree86-DRI extensions (bsc#1063037) - CVE-2017-12179: Fixed an integer overflow and unvalidated length in (S)ProcXIBarrierReleasePointer in Xi (bsc#1063038) - CVE-2017-12178: Fixed a wrong extra length check in ProcXIChangeHierarchy in Xi (bsc#1063039) - CVE-2017-12177: Fixed an unvalidated variable-length request in ProcDbeGetVisualInfo (bsc#1063040) - CVE-2017-12176: Fixed an unvalidated extra length in ProcEstablishConnection (bsc#1063041)

Patchnames

sdksp4-xorg-x11-server-13345,slessp4-xorg-x11-server-13345

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for xorg-x11-server",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for xorg-x11-server provides several fixes.\n\nThese security issues were fixed:\n\n- CVE-2017-13723: Prevent local DoS via unusual characters in XkbAtomText and\n  XkbStringText (bsc#1051150).\n- Improve the entropy when generating random data used in X.org server authorization\n  cookies generation by using getentropy() and getrandom() when available (bsc#1025084)\n- CVE-2017-12184,CVE-2017-12185,CVE-2017-12186,CVE-2017-12187: Fixed\n  unvalidated lengths in multiple extensions (bsc#1063034)\n- CVE-2017-12183: Fixed some unvalidated lengths in the XFIXES\n  extension. (bsc#1063035)\n- CVE-2017-12180,CVE-2017-12181,CVE-2017-12182: Fixed various unvalidated\n  lengths in the XFree86-VidMode/XFree86-DGA/XFree86-DRI extensions\n  (bsc#1063037)\n- CVE-2017-12179: Fixed an integer overflow and unvalidated length in\n  (S)ProcXIBarrierReleasePointer in Xi (bsc#1063038)\n- CVE-2017-12178: Fixed a wrong extra length check in\n  ProcXIChangeHierarchy in Xi (bsc#1063039)\n- CVE-2017-12177: Fixed an unvalidated variable-length request in\n  ProcDbeGetVisualInfo (bsc#1063040)\n- CVE-2017-12176: Fixed an unvalidated extra length in\n  ProcEstablishConnection (bsc#1063041)\n\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp4-xorg-x11-server-13345,slessp4-xorg-x11-server-13345",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_3025-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:3025-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173025-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:3025-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-November/003399.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025084",
        "url": "https://bugzilla.suse.com/1025084"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1051150",
        "url": "https://bugzilla.suse.com/1051150"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1063034",
        "url": "https://bugzilla.suse.com/1063034"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1063035",
        "url": "https://bugzilla.suse.com/1063035"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1063037",
        "url": "https://bugzilla.suse.com/1063037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1063038",
        "url": "https://bugzilla.suse.com/1063038"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1063039",
        "url": "https://bugzilla.suse.com/1063039"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1063040",
        "url": "https://bugzilla.suse.com/1063040"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1063041",
        "url": "https://bugzilla.suse.com/1063041"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12176 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12176/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12177 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12177/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12178 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12178/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12179 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12179/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12180 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12180/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12181 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12181/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12182 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12182/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12183 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12183/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12184 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12184/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12185 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12185/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12186 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12186/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-12187 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-12187/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13723 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13723/"
      }
    ],
    "title": "Security update for xorg-x11-server",
    "tracking": {
      "current_release_date": "2017-11-16T11:57:00Z",
      "generator": {
        "date": "2017-11-16T11:57:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:3025-1",
      "initial_release_date": "2017-11-16T11:57:00Z",
      "revision_history": [
        {
          "date": "2017-11-16T11:57:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-7.4-27.122.16.1.i586",
                "product": {
                  "name": "xorg-x11-server-sdk-7.4-27.122.16.1.i586",
                  "product_id": "xorg-x11-server-sdk-7.4-27.122.16.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-Xvnc-7.4-27.122.16.1.i586",
                "product": {
                  "name": "xorg-x11-Xvnc-7.4-27.122.16.1.i586",
                  "product_id": "xorg-x11-Xvnc-7.4-27.122.16.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-7.4-27.122.16.1.i586",
                "product": {
                  "name": "xorg-x11-server-7.4-27.122.16.1.i586",
                  "product_id": "xorg-x11-server-7.4-27.122.16.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-7.4-27.122.16.1.i586",
                "product": {
                  "name": "xorg-x11-server-extra-7.4-27.122.16.1.i586",
                  "product_id": "xorg-x11-server-extra-7.4-27.122.16.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
                "product": {
                  "name": "xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
                  "product_id": "xorg-x11-server-sdk-7.4-27.122.16.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
                "product": {
                  "name": "xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
                  "product_id": "xorg-x11-Xvnc-7.4-27.122.16.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-7.4-27.122.16.1.ia64",
                "product": {
                  "name": "xorg-x11-server-7.4-27.122.16.1.ia64",
                  "product_id": "xorg-x11-server-7.4-27.122.16.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-7.4-27.122.16.1.ia64",
                "product": {
                  "name": "xorg-x11-server-extra-7.4-27.122.16.1.ia64",
                  "product_id": "xorg-x11-server-extra-7.4-27.122.16.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
                "product": {
                  "name": "xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
                  "product_id": "xorg-x11-server-sdk-7.4-27.122.16.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
                "product": {
                  "name": "xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
                  "product_id": "xorg-x11-Xvnc-7.4-27.122.16.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-7.4-27.122.16.1.ppc64",
                "product": {
                  "name": "xorg-x11-server-7.4-27.122.16.1.ppc64",
                  "product_id": "xorg-x11-server-7.4-27.122.16.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
                "product": {
                  "name": "xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
                  "product_id": "xorg-x11-server-extra-7.4-27.122.16.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
                "product": {
                  "name": "xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
                  "product_id": "xorg-x11-server-sdk-7.4-27.122.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
                "product": {
                  "name": "xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
                  "product_id": "xorg-x11-Xvnc-7.4-27.122.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-7.4-27.122.16.1.s390x",
                "product": {
                  "name": "xorg-x11-server-7.4-27.122.16.1.s390x",
                  "product_id": "xorg-x11-server-7.4-27.122.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-7.4-27.122.16.1.s390x",
                "product": {
                  "name": "xorg-x11-server-extra-7.4-27.122.16.1.s390x",
                  "product_id": "xorg-x11-server-extra-7.4-27.122.16.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-7.4-27.122.16.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-sdk-7.4-27.122.16.1.x86_64",
                  "product_id": "xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
                "product": {
                  "name": "xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
                  "product_id": "xorg-x11-Xvnc-7.4-27.122.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-7.4-27.122.16.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-7.4-27.122.16.1.x86_64",
                  "product_id": "xorg-x11-server-7.4-27.122.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
                  "product_id": "xorg-x11-server-extra-7.4-27.122.16.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-7.4-27.122.16.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586"
        },
        "product_reference": "xorg-x11-server-sdk-7.4-27.122.16.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-7.4-27.122.16.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64"
        },
        "product_reference": "xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-7.4-27.122.16.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64"
        },
        "product_reference": "xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-7.4-27.122.16.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x"
        },
        "product_reference": "xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-7.4-27.122.16.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        },
        "product_reference": "xorg-x11-server-sdk-7.4-27.122.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-7.4-27.122.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64"
        },
        "product_reference": "xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-7.4-27.122.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64"
        },
        "product_reference": "xorg-x11-server-7.4-27.122.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-7.4-27.122.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64"
        },
        "product_reference": "xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-12176",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12176"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12176",
          "url": "https://www.suse.com/security/cve/CVE-2017-12176"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063041 for CVE-2017-12176",
          "url": "https://bugzilla.suse.com/1063041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12176"
    },
    {
      "cve": "CVE-2017-12177",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12177"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12177",
          "url": "https://www.suse.com/security/cve/CVE-2017-12177"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063040 for CVE-2017-12177",
          "url": "https://bugzilla.suse.com/1063040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12177"
    },
    {
      "cve": "CVE-2017-12178",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12178"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12178",
          "url": "https://www.suse.com/security/cve/CVE-2017-12178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063039 for CVE-2017-12178",
          "url": "https://bugzilla.suse.com/1063039"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12178"
    },
    {
      "cve": "CVE-2017-12179",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12179"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12179",
          "url": "https://www.suse.com/security/cve/CVE-2017-12179"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063038 for CVE-2017-12179",
          "url": "https://bugzilla.suse.com/1063038"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12179"
    },
    {
      "cve": "CVE-2017-12180",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12180"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12180",
          "url": "https://www.suse.com/security/cve/CVE-2017-12180"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063037 for CVE-2017-12180",
          "url": "https://bugzilla.suse.com/1063037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12180"
    },
    {
      "cve": "CVE-2017-12181",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12181"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12181",
          "url": "https://www.suse.com/security/cve/CVE-2017-12181"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063037 for CVE-2017-12181",
          "url": "https://bugzilla.suse.com/1063037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12181"
    },
    {
      "cve": "CVE-2017-12182",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12182"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12182",
          "url": "https://www.suse.com/security/cve/CVE-2017-12182"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063037 for CVE-2017-12182",
          "url": "https://bugzilla.suse.com/1063037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12182"
    },
    {
      "cve": "CVE-2017-12183",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12183"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12183",
          "url": "https://www.suse.com/security/cve/CVE-2017-12183"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063035 for CVE-2017-12183",
          "url": "https://bugzilla.suse.com/1063035"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12183"
    },
    {
      "cve": "CVE-2017-12184",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12184"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12184",
          "url": "https://www.suse.com/security/cve/CVE-2017-12184"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063034 for CVE-2017-12184",
          "url": "https://bugzilla.suse.com/1063034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12184"
    },
    {
      "cve": "CVE-2017-12185",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12185"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12185",
          "url": "https://www.suse.com/security/cve/CVE-2017-12185"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063034 for CVE-2017-12185",
          "url": "https://bugzilla.suse.com/1063034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12185"
    },
    {
      "cve": "CVE-2017-12186",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12186"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12186",
          "url": "https://www.suse.com/security/cve/CVE-2017-12186"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063034 for CVE-2017-12186",
          "url": "https://bugzilla.suse.com/1063034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12186"
    },
    {
      "cve": "CVE-2017-12187",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-12187"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-12187",
          "url": "https://www.suse.com/security/cve/CVE-2017-12187"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063034 for CVE-2017-12187",
          "url": "https://bugzilla.suse.com/1063034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-12187"
    },
    {
      "cve": "CVE-2017-13723",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13723"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13723",
          "url": "https://www.suse.com/security/cve/CVE-2017-13723"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1051150 for CVE-2017-13723",
          "url": "https://bugzilla.suse.com/1051150"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052984 for CVE-2017-13723",
          "url": "https://bugzilla.suse.com/1052984"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-Xvnc-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-server-extra-7.4-27.122.16.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-server-sdk-7.4-27.122.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-16T11:57:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13723"
    }
  ]
}

cve-2017-13723

Vulnerability from cvelistv5

Published

2017-10-09 14:00

Modified

2024-08-05 19:05

Severity ?

Summary

In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/101253	vdb-entry, x_refsource_BID
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201710-30	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/10/04/10	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://lists.x.org/archives/xorg-announce/2017-October/002808.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:05:19.958Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "101253",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101253"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "name": "GLSA-201710-30",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201710-30"
          },
          {
            "name": "[oss-security] 20171004 Fwd: X server fixes for CVE-2017-13721 \u0026 CVE-2017-13723",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/10/04/10"
          },
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-4000"
          },
          {
            "name": "[xorg-announce] 20171004 [ANNOUNCE] xorg-server 1.19.4",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.x.org/archives/xorg-announce/2017-October/002808.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-10-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "101253",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101253"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "name": "GLSA-201710-30",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201710-30"
        },
        {
          "name": "[oss-security] 20171004 Fwd: X server fixes for CVE-2017-13721 \u0026 CVE-2017-13723",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/10/04/10"
        },
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-4000"
        },
        {
          "name": "[xorg-announce] 20171004 [ANNOUNCE] xorg-server 1.19.4",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.x.org/archives/xorg-announce/2017-October/002808.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-13723",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "101253",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101253"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "GLSA-201710-30",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201710-30"
            },
            {
              "name": "[oss-security] 20171004 Fwd: X server fixes for CVE-2017-13721 \u0026 CVE-2017-13723",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/10/04/10"
            },
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "[xorg-announce] 20171004 [ANNOUNCE] xorg-server 1.19.4",
              "refsource": "MLIST",
              "url": "https://lists.x.org/archives/xorg-announce/2017-October/002808.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-13723",
    "datePublished": "2017-10-09T14:00:00",
    "dateReserved": "2017-08-28T00:00:00",
    "dateUpdated": "2024-08-05T19:05:19.958Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12177

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-17 01:52

Severity ?

Summary

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1509218	x_refsource_CONFIRM
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=4ca68b878e851e2136c234f40a25008297d8d831	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201711-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.609Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509218"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=4ca68b878e851e2136c234f40a25008297d8d831"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "name": "GLSA-201711-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-05"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509218"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=4ca68b878e851e2136c234f40a25008297d8d831"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "name": "GLSA-201711-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-05"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12177",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509218",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509218"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=4ca68b878e851e2136c234f40a25008297d8d831",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=4ca68b878e851e2136c234f40a25008297d8d831"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "GLSA-201711-05",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-05"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12177",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-17T01:52:02.457Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12178

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-16 16:18

Severity ?

Summary

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1509219	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201711-05	vendor-advisory, x_refsource_GENTOO
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=859b08d523307eebde7724fd1a0789c44813e821	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.689Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509219"
          },
          {
            "name": "GLSA-201711-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-05"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=859b08d523307eebde7724fd1a0789c44813e821"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509219"
        },
        {
          "name": "GLSA-201711-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-05"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=859b08d523307eebde7724fd1a0789c44813e821"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12178",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509219",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509219"
            },
            {
              "name": "GLSA-201711-05",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-05"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=859b08d523307eebde7724fd1a0789c44813e821",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=859b08d523307eebde7724fd1a0789c44813e821"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12178",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-16T16:18:38.414Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12179

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-17 02:01

Severity ?

Summary

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=d088e3c1286b548a58e62afdc70bb40981cdb9e8	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201711-05	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.redhat.com/show_bug.cgi?id=1509220	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.662Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=d088e3c1286b548a58e62afdc70bb40981cdb9e8"
          },
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "name": "GLSA-201711-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-05"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509220"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-25T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=d088e3c1286b548a58e62afdc70bb40981cdb9e8"
        },
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "name": "GLSA-201711-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-05"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509220"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12179",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=d088e3c1286b548a58e62afdc70bb40981cdb9e8",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=d088e3c1286b548a58e62afdc70bb40981cdb9e8"
            },
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "GLSA-201711-05",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-05"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509220",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509220"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12179",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-17T02:01:13.421Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12181

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-17 04:10

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1509222	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201711-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.644Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509222"
          },
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
          },
          {
            "name": "GLSA-201711-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-05"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-25T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509222"
        },
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
        },
        {
          "name": "GLSA-201711-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-05"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12181",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509222",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509222"
            },
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
            },
            {
              "name": "GLSA-201711-05",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-05"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12181",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-17T04:10:25.463Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12183

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-16 19:21

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201711-05	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.redhat.com/show_bug.cgi?id=1509224	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.691Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "name": "GLSA-201711-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-05"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509224"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "name": "GLSA-201711-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-05"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509224"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12183",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "GLSA-201711-05",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-05"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509224",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509224"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12183",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-16T19:21:10.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12186

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-17 00:46

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1509216	x_refsource_CONFIRM
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509216"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-25T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509216"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12186",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509216",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509216"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12186",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-17T00:46:33.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12180

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-16 20:21

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201711-05	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.redhat.com/show_bug.cgi?id=1509221	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.643Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "name": "GLSA-201711-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-05"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509221"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "name": "GLSA-201711-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-05"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509221"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12180",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "GLSA-201711-05",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-05"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509221",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509221"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12180",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-16T20:21:43.549Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12187

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-16 19:30

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1509217	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.644Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509217"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509217"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12187",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509217",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509217"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12187",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-16T19:30:41.654Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12184

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-17 02:41

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1509225	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.651Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509225"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509225"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12184",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509225",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509225"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12184",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-17T02:41:51.662Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12185

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-08-05 18:28

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1509215	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.638Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509215"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509215"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2017-12185",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509215",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509215"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12185",
    "datePublished": "2018-01-24T15:00:00",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-08-05T18:28:16.638Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12182

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-16 23:11

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1509223	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201711-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.598Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509223"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "name": "GLSA-201711-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-05"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509223"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "name": "GLSA-201711-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-05"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12182",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509223",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509223"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "GLSA-201711-05",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-05"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12182",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-16T23:11:10.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12176

Vulnerability from cvelistv5

Published

2018-01-24 15:00

Modified

2024-09-16 17:43

Severity ?

Summary

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

References

▼	URL	Tags
	https://www.debian.org/security/2017/dsa-4000	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1509214	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201711-05	vendor-advisory, x_refsource_GENTOO
	https://cgit.freedesktop.org/xorg/xserver/commit/?id=b747da5e25be944337a9cd1415506fc06b70aa81	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	The X.Org Foundation	xorg-x11-server	Version: before 1.19.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.655Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4000",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509214"
          },
          {
            "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
          },
          {
            "name": "GLSA-201711-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-05"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=b747da5e25be944337a9cd1415506fc06b70aa81"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xorg-x11-server",
          "vendor": "The X.Org Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "before 1.19.5"
            }
          ]
        }
      ],
      "datePublic": "2017-10-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-02T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4000",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509214"
        },
        {
          "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
        },
        {
          "name": "GLSA-201711-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-05"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=b747da5e25be944337a9cd1415506fc06b70aa81"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-10T00:00:00",
          "ID": "CVE-2017-12176",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xorg-x11-server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 1.19.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The X.Org Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4000",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4000"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1509214",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509214"
            },
            {
              "name": "[debian-lts-announce] 20171122 [SECURITY] [DLA 1186-1] xorg-server security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html"
            },
            {
              "name": "GLSA-201711-05",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-05"
            },
            {
              "name": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=b747da5e25be944337a9cd1415506fc06b70aa81",
              "refsource": "CONFIRM",
              "url": "https://cgit.freedesktop.org/xorg/xserver/commit/?id=b747da5e25be944337a9cd1415506fc06b70aa81"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12176",
    "datePublished": "2018-01-24T15:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-16T17:43:41.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature