{"schemaVersion":3,"id":"CVE-2017-2624","aliases":["MGASA-2018-0200","SUSE-SU-2017:1675-1","UBUNTU-CVE-2017-2624","DEBIAN-CVE-2017-2624"],"status":"published","duplicateOf":null,"title":null,"description":"It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.","dates":{"published":"2018-07-27T18:00:00.000Z","modified":"2024-08-05T14:02:06.893Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":5.9,"severity":"medium","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7,"severity":"high","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":1.9,"severity":"low","vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":5.9,"severity":"medium","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":3.6,"impact":6.7,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":7,"severity":"high","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":2.6,"impact":9.8,"computed":true}]},"epss":{"probability":0.00697,"percentile":0.52227,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.027999999999999987,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00669},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0067,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00697,"percentile":0.52227}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0067,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00669,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00697,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00697,"percentile":0.52227}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_CC17C62A4D1EC868","name":"Exploit Reference (x41-dsec.de)","source":"reference","url":"https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_4EA469CE7ADFB23A","name":"Exploit Reference (bugzilla.redhat.com)","source":"reference","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2624","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-385","name":"Covert Timing Channel","description":"Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/385.html"},{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"debian","product":"xorg-server","name":"xorg-server","label":"xorg-server","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/xorg-server","purlType":"deb","versions":[{"text":"< 2:1.19.2-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:1.19.2-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"xorg-server","name":"xorg-server","label":"xorg-server","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/xorg-server","purlType":"deb","versions":[{"text":"< 2:1.15.1-0ubuntu2.9","noFixRecorded":false,"fixedIn":null},{"text":"< 2:1.18.4-0ubuntu0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:1.15.1-0ubuntu2.9 | < 2:1.18.4-0ubuntu0.3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"xorg-server-hwe-16.04","name":"xorg-server-hwe-16.04","label":"xorg-server-hwe-16.04","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/xorg-server-hwe-16.04","purlType":"deb","versions":[{"text":"< 2:1.18.4-1ubuntu6.1~16.04.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:1.18.4-1ubuntu6.1~16.04.2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"xorg-server-lts-xenial","name":"xorg-server-lts-xenial","label":"xorg-server-lts-xenial","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/xorg-server-lts-xenial","purlType":"deb","versions":[{"text":"< 2:1.18.3-1ubuntu2.3~trusty2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:1.18.3-1ubuntu2.3~trusty2","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":{"isEol":true,"eolDate":"2018-05-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"7","label":"7 (Wheezy)","eolFrom":"2018-05-31T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"7.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"mageia","product":"nx","name":"nx","label":"nx","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/nx","purlType":"rpm","versions":[{"text":"< 3.5.0.33-1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0.33-1.mga6","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Desktop 12 SP2","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Desktop 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Desktop 12 SP2","purlType":"rpm","versions":[{"text":"< 7.6_1.18.3-71.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6_1.18.3-71.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP2","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 7.6_1.18.3-71.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6_1.18.3-71.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 7.6_1.18.3-71.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6_1.18.3-71.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 7.6_1.18.3-71.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6_1.18.3-71.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xorg-x11-server&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","name":"xorg-x11-server","label":"xorg-x11-server&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","purlType":"rpm","versions":[{"text":"< 7.6_1.18.3-71.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6_1.18.3-71.1","eol":null,"hubHref":null},{"vendor":"x.org","product":"x_server","name":"x server","label":"x_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.19.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.19.4","eol":null,"hubHref":"/vendor/xorg/x_server"},{"vendor":"x.org","product":"xorg-x11-server","name":"xorg-x11-server","label":"xorg-x11-server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.19.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.19.0","eol":null,"hubHref":"/vendor/xorg/xorg-x11-server"}],"affectedCount":13,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://security.gentoo.org/glsa/201704-03","label":"security.gentoo.org/glsa/201704-03","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/commit/d7ac755f0b618eb1259d93c8a16ec6e39a18627c","label":"gitlab.freedesktop.org/xorg/xserver/commit/d7ac755f0b618eb1259d93c8a16ec6e39a18627c","hostname":"gitlab.freedesktop.org","tags":["X Refsource CONFIRM","Patch","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1037919","label":"www.securitytracker.com/id/1037919","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html","label":"lists.debian.org/debian-lts-announce/2017/11/msg00032.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201710-30","label":"security.gentoo.org/glsa/201710-30","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96480","label":"www.securityfocus.com/bid/96480","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/","label":"www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/","hostname":"www.x41-dsec.de","tags":["X Refsource MISC","Exploit","Third Party Advisory","REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2624","label":"bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2624","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0200.html","label":"advisories.mageia.org/MGASA-2018-0200.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22734","label":"bugs.mageia.org/show_bug.cgi?id=22734","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JSPXW5WCJM4QIBQVMB3FWB7BP2LWAL45/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171675-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171675-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1019649","label":"bugzilla.suse.com/1019649","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1021803","label":"bugzilla.suse.com/1021803","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1025029","label":"bugzilla.suse.com/1025029","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1025035","label":"bugzilla.suse.com/1025035","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1025084","label":"bugzilla.suse.com/1025084","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1025985","label":"bugzilla.suse.com/1025985","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1032509","label":"bugzilla.suse.com/1032509","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1039042","label":"bugzilla.suse.com/1039042","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2624","label":"www.suse.com/security/cve/CVE-2017-2624","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2017-2624","label":"ubuntu.com/security/CVE-2017-2624","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"http://openwall.com/lists/oss-security/2017/03/01/1","label":"openwall.com/lists/oss-security/2017/03/01/1","hostname":"openwall.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3362-1","label":"ubuntu.com/security/notices/USN-3362-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2624","label":"www.cve.org/CVERecord?id=CVE-2017-2624","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-2624","label":"security-tracker.debian.org/tracker/CVE-2017-2624","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-1186-1","MGASA-2017-0269","OPENSUSE-SU-2024:11525-1","USN-3362-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:11525-1","USN-3362-1"]},"timeline":[{"kind":"published","date":"2018-07-27T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T14:02:06.893Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":38,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T22:17:49.648Z","stale":false,"partial":false}}