CVE-2017-10972 — Improper Initialization in X Server

CWE-665 — Improper Initialization10 documents8 sources
Severity
6.5MEDIUMNVD
EPSS
0.6%
top 31.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
X.org Xorg-serverX.org X Server
Timeline
PublishedJul 6
Latest updateMay 13

Description

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶Debianx.org/xorg-server< 2:1.19.3-2+3
▶NVDx.org/x_server1.19.3

Patches

Patch: cgit.freedesktop.org ↗Patch: cgit.freedesktop.org ↗

🔴Vulnerability Details

4
GHSA
GHSA-2fw8-6c95-mmp8: Uninitialized data in endianness conversion in the XEvent handling of the X↗2022-05-13
▶
OSV
xorg-server, xorg-server-hwe-16.04, xorg-server-lts-xenial vulnerabilities↗2017-07-24
▶
OSV
CVE-2017-10972: Uninitialized data in endianness conversion in the XEvent handling of the X↗2017-07-06
▶
CVEList
CVE-2017-10972: Uninitialized data in endianness conversion in the XEvent handling of the X↗2017-07-06
▶

📋Vendor Advisories

3
Ubuntu
X.Org X server vulnerabilities↗2017-07-24
▶
Red Hat
xorg-x11-server: Unitialized data in endianness conversion in the XEvent handling↗2017-06-19
▶
Debian
CVE-2017-10972: xorg-server - Uninitialized data in endianness conversion in the XEvent handling of the X.Org ...↗2017
▶

💬Community

2
Bugzilla
CVE-2017-10972 xorg-x11-server: Unitialized data in endianness conversion in the XEvent handling↗2017-07-20
▶
Bugzilla
CVE-2017-10971 CVE-2017-10972 xorg-x11-server: various flaws [fedora-all]↗2017-07-20
▶
CVE-2017-10972 — Improper Initialization in X Server | cvebase