CVE Catalog

CVE-2017-13723

High
Published: Translated: NVD NIST

Summary

In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.

Risk Assessment

An attacker could cause the X server to crash, leading to disruptions in system operation and potential security issues.

Recommendation

It is recommended to update X.Org Server to version 1.19.4 or later to mitigate this vulnerability.

Other vulnerabilities in X.Org Server (xserver, xorg-server)

Original NVD description (English source)

In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS