CVE-2017-10972: Medium severity x.org xserver vulnerability
Published Jul 6, 2017
·Updated
Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.
Affected Software
2 affected components
X.Org xorg-server<=1.19.3
X.Org X Server<=1.19.3
Remediation
Event History
Jul 6, 2017
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·11:29 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-10972?
CVE-2017-10972 is rated as a medium severity vulnerability due to its potential to expose sensitive data.
2
How do I fix CVE-2017-10972?
To fix CVE-2017-10972, upgrade the X.Org X Server to version 1.19.4 or later.
3
Who is affected by CVE-2017-10972?
CVE-2017-10972 affects users of X.Org X Server versions prior to 1.19.4.
4
What type of attack does CVE-2017-10972 enable?
CVE-2017-10972 enables authenticated malicious users to access potentially privileged data from the X server.
5
When was CVE-2017-10972 disclosed?
CVE-2017-10972 was disclosed on June 19, 2017.