PT-2017-4055 · X.Org Foundation+5 · Libxcursor+5

Tobias Stoeckmann · Published 2017-11-28 · Updated 2024-06-15 · CVE-2017-16612

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libXcursor versions prior to 1.1.15

Description The issue is related to integer overflows in the libXcursor package, which could lead to heap buffer overflows when processing malicious cursors. This might allow a remote attacker to cause a denial of service. The vulnerability can be exploited through programs that handle cursors, such as GIMP. Additionally, there is a potential attack vector against the related code in cursor/xcursor.c in Wayland through version 1.14.0.

Recommendations For libXcursor versions prior to 1.1.15, update to version 1.1.15 or later to resolve the issue. As a temporary workaround, consider restricting the use of malicious cursors to minimize the risk of exploitation.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2017-2727

BDU:2021-01287

CVE-2017-16612

DLA-1201-1

DSA-4059-1

MGASA-2017-0443

OPENSUSE-SU-2024:10919-1

SUSE-SU-2017:3214-1

SUSE-SU-2017_3214-1

SUSE-SU-2018:0246-1

USN-3501-1

USN-3622-1

Affected Products

Alt Linux

Gimp

Suse

Ubuntu

Xwayland

Libxcursor

References · 54

• 🔥 https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=4794b5dd34688158fb51a2943032569d3780c4b8 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-16612 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01625 · Security Note
• https://security-tracker.debian.org/tracker/DSA-4059-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10919-1 · Vendor Advisory
• https://usn.ubuntu.com/3622-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-16612 · Security Note
• https://ubuntu.com/security/CVE-2017-16612 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3501-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-16612 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2017-2727 · Vendor Advisory
• https://debian.org/security/2017/dsa-4059 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-16612 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:3214-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-16612 · Security Note