CVE-2017-10972

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2017-07-06

Last modified

2024-08-05

Weaknesses

CWE-665

Affected products

• X Server (X.org)

References

• http://www.debian.org/security/2017/dsa-3905
• http://www.securityfocus.com/bid/99543
• https://bugzilla.suse.com/show_bug.cgi?id=1035283
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=05442de962d3dc624f79fc1a00eca3ffc5489ced