Candidate: CVE-2019-17624
PublicDate: 2019-10-16 11:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17624
 http://packetstormsecurity.com/files/154868/X.Org-X-Server-1.20.4-Local-Stack-Overflow.html
 https://www.exploit-db.com/exploits/47507
 https://www.x.org/releases/individual/xserver/
Description:
 "" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the
 function XQueryKeymap. For example, by sending ct.c_char 1000 times, an
 attacker can cause a denial of service (application crash) or possibly have
 unspecified other impact. Note: It is disputed if the X.Org X Server is
 involved or if there is a stack overflow.
Ubuntu-Description:
Notes:
 mdeslaur> this issue is likely to be disputed
 mdeslaur> as of 2020-08-31, there is no indication this is actually a
 mdeslaur> real issue. Marking as not-affected.
Mitigation:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]

Patches_xorg-server:
upstream_xorg-server: needs-triage
precise/esm_xorg-server: DNE
trusty_xorg-server: ignored (out of standard support)
trusty/esm_xorg-server: not-affected
xenial_xorg-server: not-affected
esm-infra/xenial_xorg-server: not-affected
bionic_xorg-server: not-affected
disco_xorg-server: ignored (reached end-of-life)
eoan_xorg-server: ignored (reached end-of-life)
focal_xorg-server: not-affected
devel_xorg-server: not-affected

Patches_xorg-server-lts-xenial:
upstream_xorg-server-lts-xenial: needs-triage
precise/esm_xorg-server-lts-xenial: DNE
trusty_xorg-server-lts-xenial: ignored (out of standard support)
trusty/esm_xorg-server-lts-xenial: DNE
xenial_xorg-server-lts-xenial: DNE
bionic_xorg-server-lts-xenial: DNE
disco_xorg-server-lts-xenial: DNE
eoan_xorg-server-lts-xenial: DNE
focal_xorg-server-lts-xenial: DNE
devel_xorg-server-lts-xenial: DNE

Patches_xorg-server-hwe-16.04:
upstream_xorg-server-hwe-16.04: needs-triage
precise/esm_xorg-server-hwe-16.04: DNE
trusty_xorg-server-hwe-16.04: DNE
trusty/esm_xorg-server-hwe-16.04: DNE
xenial_xorg-server-hwe-16.04: not-affected
esm-infra/xenial_xorg-server-hwe-16.04: not-affected
bionic_xorg-server-hwe-16.04: DNE
disco_xorg-server-hwe-16.04: DNE
eoan_xorg-server-hwe-16.04: DNE
focal_xorg-server-hwe-16.04: DNE
devel_xorg-server-hwe-16.04: DNE

Patches_xorg-server-hwe-18.04:
upstream_xorg-server-hwe-18.04: needs-triage
precise/esm_xorg-server-hwe-18.04: DNE
trusty_xorg-server-hwe-18.04: DNE
trusty/esm_xorg-server-hwe-18.04: DNE
xenial_xorg-server-hwe-18.04: DNE
bionic_xorg-server-hwe-18.04: not-affected
focal_xorg-server-hwe-18.04: DNE
devel_xorg-server-hwe-18.04: DNE

Patches_xorg:
upstream_xorg: not-affected
precise/esm_xorg: DNE
trusty_xorg: ignored (out of standard support)
trusty/esm_xorg: DNE
xenial_xorg: not-affected (code not present)
esm-infra/xenial_xorg: not-affected (code not present)
bionic_xorg: not-affected (code not present)
disco_xorg: not-affected (code not present)
eoan_xorg: not-affected (code not present)
focal_xorg: not-affected (code not present)
devel_xorg: not-affected (code not present)

Patches_xorg-hwe-16.04:
upstream_xorg-hwe-16.04: not-affected
precise/esm_xorg-hwe-16.04: DNE
trusty_xorg-hwe-16.04: DNE
trusty/esm_xorg-hwe-16.04: DNE
xenial_xorg-hwe-16.04: not-affected (code not present)
esm-infra/xenial_xorg-hwe-16.04: not-affected (code not present)
bionic_xorg-hwe-16.04: DNE
disco_xorg-hwe-16.04: DNE
eoan_xorg-hwe-16.04: DNE
focal_xorg-hwe-16.04: DNE
devel_xorg-hwe-16.04: DNE

Patches_xorg-server-lts-utopic:
upstream_xorg-server-lts-utopic: needs-triage
precise/esm_xorg-server-lts-utopic: DNE
trusty_xorg-server-lts-utopic: ignored (out of standard support)
trusty/esm_xorg-server-lts-utopic: DNE
xenial_xorg-server-lts-utopic: DNE
bionic_xorg-server-lts-utopic: DNE
disco_xorg-server-lts-utopic: DNE
eoan_xorg-server-lts-utopic: DNE
focal_xorg-server-lts-utopic: DNE
devel_xorg-server-lts-utopic: DNE

Patches_xorg-server-lts-vivid:
upstream_xorg-server-lts-vivid: needs-triage
precise/esm_xorg-server-lts-vivid: DNE
trusty_xorg-server-lts-vivid: ignored (out of standard support)
trusty/esm_xorg-server-lts-vivid: DNE
xenial_xorg-server-lts-vivid: DNE
bionic_xorg-server-lts-vivid: DNE
disco_xorg-server-lts-vivid: DNE
eoan_xorg-server-lts-vivid: DNE
focal_xorg-server-lts-vivid: DNE
devel_xorg-server-lts-vivid: DNE

Patches_xorg-server-lts-wily:
upstream_xorg-server-lts-wily: needs-triage
precise/esm_xorg-server-lts-wily: DNE
trusty_xorg-server-lts-wily: ignored (out of standard support)
trusty/esm_xorg-server-lts-wily: DNE
xenial_xorg-server-lts-wily: DNE
bionic_xorg-server-lts-wily: DNE
disco_xorg-server-lts-wily: DNE
eoan_xorg-server-lts-wily: DNE
focal_xorg-server-lts-wily: DNE
devel_xorg-server-lts-wily: DNE