CVE-2017-10971: x.org x_server
CVSS: 8.8v3.0HighModified
AliasesUBUNTU-CVE-2017-10971DEBIAN-CVE-2017-10971
Published 06-07-2017Last modified 05-08-2024
Vulnerability summary
CVE-2017-10971 is a high (CVSS 8.8) vulnerability in x.org x_server. EPSS estimates a 3.88% chance of exploitation in the next 30 days, higher than 90.1% of scored vulnerabilities.
CVSS score
8.8/10
010
High · v3.0 (NVD)EPSS score
3.88%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 9 · Related 6Timeline
- 06-07-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.
CVSS metrics
4 scores · 3 sources · 2 versionsHigh 8.8Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Medium 6.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:S/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
3.88%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.88% on 20-09-2026
20-09-202620-10-2026
EPSS score3.88%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu3 products
- xorg-server< 2:1.15.1-0ubuntu2.9 | < 2:1.18.4-0ubuntu0.3
- xorg-server-hwe-16.04< 2:1.18.4-1ubuntu6.1~16.04.2
- xorg-server-lts-xenial< 2:1.18.3-1ubuntu2.3~trusty2
Debian1 product
- xorg-server< 2:1.19.3-2
X.org1 product
- x_server≤ 1.19.3
3 vendors · 5 products
References
11 links- cgit.freedesktop.org/xorg/xserver/commit/?id=215f894965df5fb0bb45b107d84524e700d2073cX Refsource MISCMailing ListThird Party Advisory
- cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b136486961c82deac76bbde455X Refsource MISCMailing ListThird Party Advisory
- cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992edcfd282cbeeec35d9dX Refsource MISCMailing ListThird Party Advisory