CVE-2017-16612

2017-11-2800:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.006

Percentile

77.6%

JSON

libXcursor before 1.1.15 has various integer overflows that could lead to
heap buffer overflows when processing malicious cursors, e.g., with
programs like GIMP. It is also possible that an attack vector exists
against the related code in cursor/xcursor.c in Wayland through 1.14.0.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchlibxcursor< 1:1.1.14-3ubuntu0.1UNKNOWN
ubuntu14.04noarchlibxcursor< 1:1.1.14-1ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchlibxcursor< 1:1.1.14-1ubuntu0.16.04.1UNKNOWN
ubuntu17.04noarchlibxcursor< 1:1.1.14-1ubuntu0.17.04.1UNKNOWN
ubuntu17.10noarchwayland< 1.14.0-1ubuntu0.1UNKNOWN
ubuntu14.04noarchwayland< 1.4.0-1ubuntu1.1UNKNOWN
ubuntu16.04noarchwayland< 1.12.0-1~ubuntu16.04.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	17.10	noarch	libxcursor	< 1:1.1.14-3ubuntu0.1	UNKNOWN
ubuntu	14.04	noarch	libxcursor	< 1:1.1.14-1ubuntu0.14.04.1	UNKNOWN
ubuntu	16.04	noarch	libxcursor	< 1:1.1.14-1ubuntu0.16.04.1	UNKNOWN
ubuntu	17.04	noarch	libxcursor	< 1:1.1.14-1ubuntu0.17.04.1	UNKNOWN
ubuntu	17.10	noarch	wayland	< 1.14.0-1ubuntu0.1	UNKNOWN
ubuntu	14.04	noarch	wayland	< 1.4.0-1ubuntu1.1	UNKNOWN
ubuntu	16.04	noarch	wayland	< 1.12.0-1~ubuntu16.04.3	UNKNOWN