Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 6, 2017 |
| Debian | — | Upgrade xorg-server | Jul 10, 2017 | Jul 6, 2017 |
| Freebsd | — | Upgrade xorg-server | Oct 17, 2017 | Oct 17, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Dec 4, 2019 | Jul 6, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Dec 18, 2019 | Jul 6, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xvfb to version 1.14.5-0.175.3.24.0.3.1539 on Solaris 11.3Upgrade x11/server/xephyr to version 1.14.5-0.175.3.24.0.3.1539 on Solaris 11.3Upgrade x11/server/xorg to version 1.14.5-0.175.3.24.0.3.1539 on Solaris 11.3Upgrade x11/server/xvnc to version 1.1.0-0.175.3.24.0.3.1539 on Solaris 11.3 | Sep 19, 2017 | Jul 6, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2017 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-xvncUpgrade xorg-x11-server-sdk | Jul 12, 2017 | Jul 6, 2017 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core-lts-xenialUpgrade xserver-xorg-core | Jul 24, 2017 | Jul 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub