https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:42:44 +0000 https://cve.radiocsirt.org/vuln/cve-2017-10972 <p>Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.</p> <p>Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.</p> https://cve.radiocsirt.org/vuln/cve-2017-10972 https://cve.radiocsirt.org/vuln/usn-3362-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: xorg-server, Ubuntu:14.04:LTS: xorg-server-lts-xenial, Ubuntu:16.04:LTS: xorg-server, Ubuntu:16.04:LTS: xorg-server-hwe-16.04</p> <p>It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator. (CVE-2017-10971)</p> <p>It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly obtain sensitive information. (CVE-2017-10972)</p> <p>Eric Sesterhenn discovered that the X.Org X server incorrectly compared MIT cookies. An attacker could possibly use this issue to perform a timing attack and recover the MIT cookie. (CVE-2017-2624)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: xorg-server, Ubuntu:14.04:LTS: xorg-server-lts-xenial, Ubuntu:16.04:LTS: xorg-server, Ubuntu:16.04:LTS: xorg-server-hwe-16.04</p> <p>It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator. (CVE-2017-10971)</p> <p>It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly obtain sensitive information. (CVE-2017-10972)</p> <p>Eric Sesterhenn discovered that the X.Org X server incorrectly compared MIT cookies. An attacker could possibly use this issue to perform a timing attack and recover the MIT cookie. (CVE-2017-2624)</p> https://cve.radiocsirt.org/vuln/usn-3362-1