In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.
References
| Link | Resource |
|---|---|
| http://www.debian.org/security/2017/dsa-4000 | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/10/04/10 | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/101238 | Third Party Advisory VDB Entry |
| https://cgit.freedesktop.org/xorg/xserver/commit/?id=b95f25af141d33a65f6f821ea9c003f66a01e1f1 | Third Party Advisory |
| https://lists.x.org/archives/xorg-announce/2017-October/002808.html | Vendor Advisory |
| https://security.gentoo.org/glsa/201710-30 | Third Party Advisory |
| http://www.debian.org/security/2017/dsa-4000 | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/10/04/10 | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/101238 | Third Party Advisory VDB Entry |
| https://cgit.freedesktop.org/xorg/xserver/commit/?id=b95f25af141d33a65f6f821ea9c003f66a01e1f1 | Third Party Advisory |
| https://lists.x.org/archives/xorg-announce/2017-October/002808.html | Vendor Advisory |
| https://security.gentoo.org/glsa/201710-30 | Third Party Advisory |
Configurations
History
29 Aug 2025, 13:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
X.org x Server
|
|
| CPE | cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:* |
Information
Published : 2017-10-10 01:30
Updated : 2025-08-29 13:42
NVD link : CVE-2017-13721
Mitre link : CVE-2017-13721
CVE.ORG link : CVE-2017-13721
JSON object : View
Products Affected
x.org
- x_server
debian
- debian_linux
CWE
CWE-269
Improper Privilege Management