CVE-2017-10972

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.

Eric Sesterhenn discovered that the X.Org X server incorrectly compared MIT cookies. An attacker could possibly use this issue to perform a timing attack and recover the MIT cookie (CVE-2017-2624).

It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator (CVE-2017-10971).

It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly obtain sensitive information (CVE-2017-10972).

Use-after-free issue in an unused function in XDM (boo#1025035).

This update for xorg-x11-server fixes the following issues:

• CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283)
• Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range.
• CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage.

This update for xorg-x11-server provides the following fixes:

• CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283)
• Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range.
• CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage.

This update for xorg-x11-server provides the following fixes:

• CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283)
• Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range.
• CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage.

This update for xorg-x11-server fixes the following issues:

• CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283)
• Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range.
• CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage.

It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator. (CVE-2017-10971)

It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to possibly obtain sensitive information. (CVE-2017-10972)

Eric Sesterhenn discovered that the X.Org X server incorrectly compared MIT cookies. An attacker could possibly use this issue to perform a timing attack and recover the MIT cookie. (CVE-2017-2624)