In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 6, 2017 |
| Debian | — | Upgrade xorg-server | Jul 10, 2017 | Jul 6, 2017 |
| Freebsd | — | Upgrade xorg-server | Oct 17, 2017 | Oct 17, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Dec 4, 2019 | Jul 6, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Dec 18, 2019 | Jul 6, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.14.5-0.175.3.24.0.3.1539 on Solaris 11.3Upgrade x11/server/xvfb to version 1.14.5-0.175.3.24.0.3.1539 on Solaris 11.3Upgrade x11/server/xorg to version 1.14.5-0.175.3.24.0.3.1539 on Solaris 11.3Upgrade x11/server/xvnc to version 1.1.0-0.175.3.24.0.3.1539 on Solaris 11.3 | Sep 19, 2017 | Jul 6, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2017 |
| Suse | — | Upgrade xorg-x11-XvncUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server | Jul 12, 2017 | Jul 6, 2017 |
| Ubuntu | — | Upgrade xserver-xorg-core-lts-xenialUpgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 | Jul 24, 2017 | Jul 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub